When should I use implicit_allow: true?

This property should be used exclusively for administrative roles, as it grants all permissions by default without requiring explicit listing.

Can I have multiple default roles?

No, only one role can have 'is_default: true' set. This role is automatically applied to users who have no other role assigned.

What is the primary requirement for using roles in Bknd?

You must have the Guard system enabled in your configuration (`guard: { enabled: true }`) for roles and permissions to be enforced.

How do I assign a role to a user during registration?

You can set the 'default_role_register' property in your auth configuration to the name of the role you want every new user to receive.

Bknd Role Configuration

Name: Bknd Role Configuration
Author: cameronapak

bycameronapak

•

API開発

Defines and manages user roles, permissions, and authorization hierarchies within the Bknd.io ecosystem.

概要

The bknd-create-role skill provides a standardized framework for implementing Role-Based Access Control (RBAC) in Bknd.io applications. It guides developers through the process of enabling the Guard system, defining granular permissions for CRUD operations, and configuring role properties like implicit allowance and default status. Whether setting up a simple public/private access model or a complex multi-tier administrative system, this skill ensures that backend security is robust, code-driven, and follows best practices for authorization.

主な機能

1 GitHub stars
Implement multi-tier access patterns like Admin/Editor/Viewer
Automate role assignment during user registration
Set up default roles for unauthenticated users
Define granular CRUD permissions for entities
Configure 'implicit_allow' for administrative roles

ユースケース

Creating an API with restricted read-only access for guest users
Building a secure CMS with distinct access levels for content creators and managers
Implementing administrative dashboards with full system control via implicit permissions

概要

主な機能

1 GitHub stars
Implement multi-tier access patterns like Admin/Editor/Viewer
Automate role assignment during user registration
Set up default roles for unauthenticated users
Define granular CRUD permissions for entities
Configure 'implicit_allow' for administrative roles

ユースケース

Creating an API with restricted read-only access for guest users
Building a secure CMS with distinct access levels for content creators and managers
Implementing administrative dashboards with full system control via implicit permissions