Implement CRUDable model operations with Can* permission checks in pkg/models/.
npx skills add https://github.com/go-vikunja/vikunja --skill crudable
Please help me install this Agent Skill. Skill: crudable Source: https://github.com/go-vikunja/vikunja/tree/main/.claude/skills/crudable Command: npx skills add https://github.com/go-vikunja/vikunja --skill crudable
This skill prevents insecure or inconsistent CRUD implementations by ensuring model-level permission checks are implemented once and enforced reliably.
CRUDable interface and implement CanRead, CanCreate, CanUpdate, and CanDelete on the model.Can* methods rather than duplicating logic in route handlers.Use the crudable skill to review or implement a new model in pkg/models/ by adding CRUD operations plus the full set of model-level Can* permission methods and ensuring both sides of permission tests are covered.
High-intent search queries and answers about installing and using this skill.
To centralize access control, implement the required CRUDable interface and define CanRead, CanCreate, CanUpdate, and CanDelete methods on your model. This enforces permissions directly at the model layer, avoiding duplicated logic in route handlers.
The best way to structure CRUD permissions with xorm is to place permission logic inside model-level Can* methods rather than route handlers. This ensures secure and consistent behavior by querying access rights exactly where model operations are handled.
Write unit tests for Go model permission checks by providing both positive and negative test cases. You must also include inherited and shared access edge cases to ensure the Can* methods correctly enforce read, create, update, and delete restrictions.
No, you should avoid rechecking permissions in route handlers. The Can* methods on the model layer handle access control enforcement, so duplicating these checks in routes creates unnecessary logic and potential inconsistencies.
Go model CRUD operations bypass access control when permission checks are omitted from Can* methods or incorrectly placed in route handlers. Implementing the CRUDable interface with proper CanRead, CanCreate, CanUpdate, and CanDelete logic resolves this enforcement issue.
Snowflake-LabsConfigure and verify Oracle database connections for schema extraction.
teexiiiDefine and register HTTP routes and middleware for REST API endpoints.
vikas-gits-goodEnforce Row Level Security patterns in Prisma database queries and API routes.
rauell1Configures Vercel routing middleware intercepting requests before cache for rewrites, redirects, header injection.