Golang backend ( CasbinJsGetPermissionForUser ) not working with casbin.js ( react )

[Kliton]

The problem is that CasbinJsGetPermissionForUser on backend reeturns this:

{
    "m": "[request_definition]\nr = sub, dom, obj, act\n[policy_definition]\np = sub, dom, obj, act\n[role_definition]\ng = _, _, _\n[policy_effect]\ne = some(where (p.eft == allow))\n[matchers]\nm = g(r.sub, p.sub, r.dom) && r.dom == p.dom && r.obj == p.obj && r.act == p.act\n",
    "p": [
        [
            "p",
            "admin",
            "default",
            "users",
            "read"
        ],
        [
            "p",
            "admin",
            "default",
            "users",
            "write"
        ]
    ]
}

My policies are

p, admin, default, users, read
p, admin, default, users, write

g, demo1, admin, default

My model is:

[request_definition]
r = sub, dom, obj, act

[policy_definition]
p = sub, dom, obj, act

[role_definition]
g = _, _, _

[policy_effect]
e = some(where (p.eft == allow))

[matchers]
m = g(r.sub, p.sub, r.dom) && r.dom == p.dom && r.obj == p.obj && r.act == p.act

On frontend side ( react with casbin.js )
I'm doing this:

const authorizer = new casbinjs.Authorizer("manual");
/* other code... */
authorizer.setPermission(responseFromCasbinJsGetPermissionForUser);

 let can = await authorizer.can('read', 'users'); // -> Return FALSE, which is wrong

Why is not working?

[hsluoyz]

@closetool @Zxilly plz do this together.

[Zxilly]

@Kliton As for now, casbin.js is a wrapper of node-casbin. You can use node-casbin directly.

[Kliton]

Ok i will try

[MRGUOKING]

@Kliton I have saw the Official documents and source code of casbin.js. If you want to use "manual" model. your permission style should like this

{
    "read": ['data1', 'data2'],
    "write": ['data1']
}

if you use "auto" model ,you should write like this

// Set your backend casbin service url
const authorizer = new casbinjs.Authorizer('auto', {endpoint: 'http://Domain_name/casbin/api'});

// When the identity shifts, reset the user. Casbin.js will automatically fetch the permission from the endpoint.
await authorizer.setUser("Tom");

so you can use the 'auto' model when get restult from backend
you can see the official document casbin.js

This's my understanding. If there is any mistake ,please correct it

[github-actions]

🎉 This issue has been resolved in version 0.4.0 🎉

The release is available on:

• npm package (@latest dist-tag)
• GitHub release

Your semantic-release bot 📦🚀