Design Crystallize role, field-level, and CRUD permission strategies.
npx skills add https://github.com/CrystallizeAPI/ai --skill permissions-crystallizeapi
Please help me install this Agent Skill. Skill: permissions Source: https://github.com/CrystallizeAPI/ai/tree/main/use-crystallize/skills/permissions Command: npx skills add https://github.com/CrystallizeAPI/ai --skill permissions-crystallizeapi
Crystallize permissions and access control can be difficult to design correctly, especially when you need to restrict sensitive fields while keeping integrations working.
Use the permissions skill to design a role and token plan that enforces CRUD restrictions on sensitive fields while using UI locks only for editor experience.
High-intent search queries and answers about installing and using this skill.
Field-level security in Crystallize requires configuring CRUD permissions on shapes and fields, because UI read-only or hidden settings only affect the editor experience and do not block API writes. You must apply API-enforced restrictions to prevent unauthorized modifications.
Designing role-based permissions for multi-team workflows involves mapping custom and built-in roles to specific catalogue folders, price variants, and shapes. You must account for the one-role-per-user constraint when structuring access control across your teams.
Yes, you can restrict access to specific catalogue folders and price variants by applying CRUD permissions at the resource level. This allows you to control exactly who can view or modify specific content within your multi-role workflows.
Setting a shape field to read-only in the UI only controls the editor experience and does not enforce security. To actually block API updates, you must configure the corresponding CRUD permissions to restrict write access at the API level.
Mapping user roles and access tokens to the GraphQL Core API permission model requires distinguishing UI-only locks from API-enforced restrictions. You assign role-scoped user tokens for individual access and tenant-level API tokens for integrations.
reactiveDefine Entity, Collection, and Union schemas for API JSON responses.
salmanabdurrahmanDetect IDOR vulnerabilities across REST, GraphQL, gRPC, and WebSocket APIs.
CrystallizeAPIGenerates formatted Crystallize PIM catalogue items as json.itemData payloads from spreadsheet or user-supplied data.
congiulucImplement JWT authentication and RBAC for .NET Minimal API endpoints.
