Access System

The access system is divided into two mechanisms: verifying user access to a method (sufficient for simple projects) and verifying access to data.

Process Description

Description of the access system process.

The system is enabled only for users of type USER, while for ADMIN, checks are skipped. Also, access is verified only for external requests (from a client or via API).

Permissions are loaded during session initialization and subsequently stored within it. They are updated upon change.

There are some settings in the internal API configuration located in libs/api/apiConfig. There you can find default.ts and project.ts files. The first contains core settings, while the second can be supplemented with settings for a specific project. Settings from these two files are merged.