Does Bknd support invite-only registration?

Yes, you can set 'allow_register: false' in your configuration to disable self-registration and require admins to create user accounts manually.

What is the 'default role' in Bknd?

The default role is assigned to requests that do not provide an authentication token, allowing you to define exactly what unauthenticated (anonymous) users can access.

How do I restrict users to only seeing their own data?

You can use the 'filter' effect in your role permissions to match a record's owner ID against the dynamic '@user.id' placeholder of the logged-in user.

Can I make only specific database entities public?

Yes, you can use entity-specific policies within the anonymous role to permit 'read' access to certain tables while keeping others restricted to authenticated users.

Bknd Access Control

Name: Bknd Access Control
Author: cameronapak

bycameronapak

•

API 개발

Configures granular public, authenticated, and entity-specific access rules for Bknd.io backends.

소개

This skill provides comprehensive patterns for managing data security and visibility within Bknd.io applications. It guides developers through setting up anonymous roles for unauthenticated access, enforcing strict authentication for sensitive data, and implementing complex permission logic like record-level filtering based on status or ownership. Whether you are building a public blog, a private SaaS, or a hybrid API, this skill helps you implement robust access control using Bknd's code-first configuration approach.

주요 기능

1 GitHub stars
Anonymous and default role configuration
Invite-only and private system configurations
Record-level data filtering and ownership checks
Entity-specific permission scoping
Public Read/Authenticated Write access patterns

사용 사례

Building a SaaS where users can only view and edit their own private projects.
Setting up a public-facing API that restricts data creation to authorized API users.
Creating a blog with public posts but authenticated comment management.

소개

주요 기능

1 GitHub stars
Anonymous and default role configuration
Invite-only and private system configurations
Record-level data filtering and ownership checks
Entity-specific permission scoping
Public Read/Authenticated Write access patterns

사용 사례

Building a SaaS where users can only view and edit their own private projects.
Setting up a public-facing API that restricts data creation to authorized API users.
Creating a blog with public posts but authenticated comment management.