backend-auth

What problem does it solve?

This Skill helps you secure Drumr backend apps by defining who can see, create, update, execute, and write specific data without leaking permissions across roles or forms.

Core Features & Use Cases

• Register guest, global, and role-based permissions with app.defineGuestPermissions, app.defineGlobalPermissions, and app.definePermissionsForRole.
• Model application users with AppUser and enforce action permissions for models, params, and return classes.
• Handle common backend edge cases such as access/read pairing, File uploads and downloads, immutable audit fields, and relation selectors that must write referenced ids.
• Use it when building ownership rules, assignee-only actions, or broad admin access with precise deny overrides.

Quick Start

Use this skill to draft or review a backend authorization file for your Drumr app, including role rules, model access, and any required file or relation-selector permissions.