88
Implement impersonating users & roles in App & API
Source: directus/directus#19085 · opened by @SeanDylanGoff
Summary Admin users will be able to send the headers x-impersonate-user and x-impersonate-role. The API would then treat the user to have the given role / user id for all intents and purposes (permissions, presets etc). There will also be a selector in the App for configuring if those headers are sent to the API. This selector should be easy to reach & refresh all data when changed Basic Example _No response_ Motivation When developing a backend with multiple roles and role-specific presets mistakes can be easily overlooked, especially if users also have their own presets. I'm often confronted with problems that users have which are either role- or user specific. Having a way to impersonate users during QA and when responding to support tickets would make life a lot easier. The current solution of either creating dummy users, or temporarily resetting user's passwords (making them reset it again after) is not good enough. The extended idea of being able …
No pledges yet. Be the first to back this.
Comments
Similar requests
API Testing UI (Swagger-like) with Role-Based Simulation
5 votes · 0 comments
Ability to Hide Visual Editor Extension for Specific Roles
1 vote · 0 comments
Code-first configuration of schema, roles and permissions
274 votes · 0 comments
Better control by roles
1 vote · 0 comments
Manage Multitenancy with Users Logging in via Keycloak
1 vote · 0 comments
No comments yet.