Permissions

Auxilium2 uses Deegraph to handle user permissions.

As a general rule, permissions should always be executed on their relative paths rather than a specific user/object.

Root Contextual Permissions

The root contextual permissions are stored in an array in the /Public/System/init.php file.

Examples

Case Todos

To grant the relevant users permissions to read and delete todo items for a case, you shouldn't execute:

GRANT READ ON {case_id}/todos/# ON {user_id}

But instead, you should execute the following for all users during setup:

GRANT READ ON /cases/#/todos/#