Let's talk about Appwrite's permissions

Source: appwrite/appwrite#2689 · opened by @Meldiron

![GitHub Topics (3)]( Appwrite's permissions make your application secure by default. This means, nothing is allowed by default, and you explicitly need to mention specific users or groups of users, and give them read or write access to specific document or collection. Such a whitelist system makes every Appwrite application secure, and the only security issue can come from the developer's mistakes. This flow is really handy to keep things secure, but it can become a bit annoying the more you need to customize it. For example, for security reasons, Appwrite cannot allow you to give read permission to other people. This is the case because you could create a bunch of documents, give read access to some users, and spam their (for example) notification feeds. How do you create notifications then? To get around these limitations, you need to prepare cloud functions which can feel time-consuming. All want to do is send some notification, right?!? Since you are sending no…

5 years ago