create-custom-permissions

What problem does it solve?

This Skill enables the management and enforcement of application-level capabilities in DaaS (Data as a Service) applications, providing fine-grained control over user permissions beyond standard CRUD operations.

Core Features & Use Cases

• Custom Permissions Definition: Define and assign application-level capabilities (custom flags) that can be checked alongside standard DaaS data-access permissions.
• Integration with Policy/Roles: Custom permissions integrate with the existing Policy → Role → User assignment chain, ensuring consistency across the application.
• Use Case: For applications requiring application-level capability flags that are not tied to specific data collections or CRUD operations, such as showing or hiding UI elements or enabling certain actions based on user roles.

Quick Start

To assign a custom permission, use the enforceCustomPermission('MyApp.Feature.Key') function within your API routes to check for permission and throw a 403 error if not granted.