Skip to content

Authorization for data write and schema write endpoint #2036

@Thyagarajanc77

Description

@Thyagarajanc77

Is your feature request related to a problem? Please describe.
Currently, Permify allows authentication via OIDC, but anyone with the token or key has access to check permissions and update schema or add data. This poses a security risk, as users with access to the token can modify critical aspects of the system without distinction between read and write privileges.

Describe the solution you'd like
Specifically, there should be separate keys or tokens that distinguish between read access (for checking permissions) and write access (for updating schema or adding data). This would help secure the system by restricting sensitive actions like schema modifications and data insertions to only authorized users or systems.

Describe alternatives you've considered
n/a

Additional context
n/a

Metadata

Metadata

Labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions