-
-
Notifications
You must be signed in to change notification settings - Fork 255
Description
Is your feature request related to a problem? Please describe.
Currently, Permify allows authentication via OIDC, but anyone with the token or key has access to check permissions and update schema or add data. This poses a security risk, as users with access to the token can modify critical aspects of the system without distinction between read and write privileges.
Describe the solution you'd like
Specifically, there should be separate keys or tokens that distinguish between read access (for checking permissions) and write access (for updating schema or adding data). This would help secure the system by restricting sensitive actions like schema modifications and data insertions to only authorized users or systems.
Describe alternatives you've considered
n/a
Additional context
n/a