Merge pull request #9729 from marmelab/update-rbac-doc

[Doc] Update RBAC to mention ability to define permissions on an array of resources
marmelab · Mar 19, 2024 · e87f8f4 · e87f8f4
2 parents 2998475 + d85fcb9
commit e87f8f4
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/docs/AuthRBAC.md b/docs/AuthRBAC.md
@@ -98,6 +98,7 @@ Here are a few examples of permissions:
 
 - `{ action: "*", resource: "*" }`: allow everything
 - `{ action: "read", resource: "*" }`: allow read actions on all resources
+- `{ action: "read", resource: ["companies", "people"] }`: allow read actions on a subset of resources
 - `{ action: ["read", "create", "edit", "export"], resource: "companies" }`: allow all actions except delete on companies
 - `{ action: ["write"], resource: "game.score", record: { "id": "123" } }`: allow to change the score on a particular game