This post discusses the implementation of a Role-Based Access Control (RBAC) model and Request Access Approval system in an open-source notes-sharing application called Makaut Buddy. The author explains the importance of authorization, the difference between authentication and authorization, and provides a step-by-step guide to setting up RBAC using Permit.io. Key steps include defining roles and permissions, creating resources, assigning actions to roles, and configuring backend APIs. Additionally, it covers how to implement a system where users can request role upgrades, and admins can approve or deny these requests.
Table of contents
IntroductionWhat is Authorization ?Why do we need an RBAC model for authorization 🤔?How to implement RBAC in an app :Implementing RBAC model :Implementing Access Approval System:Demo of RBAC in a notes sharing application :Conclusion :Sort: