RFC: Permissions

This document describes the responsibilities and functionalities for aurelia-permissions.

Aurelia-permissions is a module that exposes a set of filters and services, that allow you to verify if the current user has access to the requested action.

Configuration

[TBD: e.g. groups and privileges]

Services

[TBD: e.g. .isAllowed('resource', 'action')]

Filter

[TBD: e.g. https://github.com/spoonx/aurelia-auth#making-the-aurelia-router-authentication-aware]

Attribute

[TBD: e.g. allowed="controller.action"]

Integrations

[TBD: e.g. Router to show / hide pages]

Init

.fromAuth()

Will attach itself to aurelia-auth, and use the payload to determine the roles and permissions for the currently authenticated user.