mirror of
https://github.com/hasura/graphql-engine.git
synced 2024-12-17 20:41:49 +03:00
866476ab36
GITHUB_PR_NUMBER: 8011 GITHUB_PR_URL: https://github.com/hasura/graphql-engine/pull/8011 PR-URL: https://github.com/hasura/graphql-engine-mono/pull/3317 Co-authored-by: Rikin Kachhia <54616969+rikinsk@users.noreply.github.com> GitOrigin-RevId: 90c8f75003a07c5153c9e478efa599ab0bfb85d9
78 lines
1.8 KiB
ReStructuredText
78 lines
1.8 KiB
ReStructuredText
.. meta::
|
|
:description: Permissions for Hasura actions
|
|
:keywords: hasura, docs, actions, permissions
|
|
|
|
.. _actions_permissions:
|
|
|
|
Actions permissions
|
|
===================
|
|
|
|
.. contents:: Table of contents
|
|
:backlinks: none
|
|
:depth: 2
|
|
:local:
|
|
|
|
Introduction
|
|
------------
|
|
|
|
As with the other fields in the GraphQL schema, users need to be
|
|
given access to an action.
|
|
|
|
Set action permissions
|
|
----------------------
|
|
|
|
.. rst-class:: api_tabs
|
|
.. tabs::
|
|
|
|
.. tab:: Console
|
|
|
|
Head to the ``Actions -> [action-name] -> Permissions`` tab in the
|
|
console.
|
|
|
|
.. thumbnail:: /img/graphql/core/actions/actions-permissions.png
|
|
:alt: Console action permission
|
|
|
|
Hit ``Save`` to give the role permission to access the action.
|
|
|
|
.. tab:: CLI
|
|
|
|
Go to ``metadata/actions.yaml`` in the Hasura project directory.
|
|
|
|
Update the definition of the ``insertAuthor`` action as:
|
|
|
|
.. code-block:: yaml
|
|
:emphasize-lines: 6-8
|
|
|
|
- actions
|
|
- name: insertAuthor
|
|
definition:
|
|
kind: synchronous
|
|
handler: '{{ACTIONS_BASE_URL}}/insertAuthor'
|
|
permissions:
|
|
- role: user
|
|
- role: publisher
|
|
|
|
Save the changes and run ``hasura metadata apply`` to set the
|
|
permissions.
|
|
|
|
.. tab:: API
|
|
|
|
Action permissions can be set by using the :ref:`metadata_create_action_permission` metadata API:
|
|
|
|
.. code-block:: http
|
|
|
|
POST /v1/metadata HTTP/1.1
|
|
Content-Type: application/json
|
|
X-Hasura-Role: admin
|
|
|
|
{
|
|
"type": "create_action_permission",
|
|
"args": {
|
|
"action": "insertAuthor",
|
|
"role": "user"
|
|
}
|
|
}
|
|
|
|
.. admonition:: Additional Resources
|
|
|
|
Introduction to Hasura Actions - `View Recording <https://hasura.io/events/webinar/hasura-actions/?pg=docs&plcmt=body&cta=view-recording&tech=>`__. |