问在环回中创建与其他持久化模型的关系时，如何修改默认用户模型acl？
EN

Stack Overflow用户

提问于 2016-03-25 12:01:35

回答 2查看 282关注 0票数 0

我已经创建了一个从基本用户模型扩展而来的用户模型，并添加了与其他持久模型的关系。当我试图通过explorer访问关系方法时，它给出了授权错误。

我的用户模型结构(Json)

{
  "name": "teamuser",
  "base": "User",
  "idInjection": true,
  "options": {
    "validateUpsert": true
  },
  "properties": {
    "empid": {
      "type": "number",
      "required": true
    },
    "designation": {
      "type": "string"
    }
  },
  "validations": [],
 "relations": {
    "tasks": {
      "type": "hasMany",
      "model": "task",
      "foreignKey": "userid"
    }
  },
 "acls": [],
  "methods": {}
}

MyTask模型结构(Json)

{
  "name": "task",
  "base": "PersistedModel",
  "idInjection": true,
  "options": {
    "validateUpsert": true
  },
  "properties": {
    "title": {
      "type": "string",
      "required": true
    },
    "desc": {
      "type": "string"
    },
    "startdate": {
      "type": "date",
      "required": true
    },
    "enddate": {
      "type": "date",
      "required": true
    },
    "status": {
      "type": "string",
      "required": true
    }
  },
  "validations": [],
"relations": {
    "teamuser": {
      "type": "belongsTo",
      "model": "teamuser",
      "foreignKey": "userid"
    },
    "project": {
      "type": "belongsTo",
      "model": "project",
      "foreignKey": ""
    }
  },
 "acls": [],
  "methods": {}
}

当我尝试在explored中点击下面的方法时，我得到了错误

http://0.0.0.0:3000/api/teamusers/5/tasks?access_token=AQVBwaoo1g0msk2eRvyAqbybCvKmswhHfLh1SeNYrzmsvn1gmCou5EaDBTpaiA2M

{
  "error": {
    "name": "Error",
    "status": 401,
    "message": "Authorization Required",
    "statusCode": 401,
    "code": "AUTHORIZATION_REQUIRED",
    "stack": "Error: Authorization Required\n    at /Users/mohamediqbalsaleem/Documents/easasoft/Testcb/node_modules/loopback/lib/application.js:376:21\n    at /Users/mohamediqbalsaleem/Documents/easasoft/Testcb/node_modules/loopback/lib/model.js:313:7\n    at /Users/mohamediqbalsaleem/Documents/easasoft/Testcb/node_modules/loopback/common/models/acl.js:465:23\n    at /Users/mohamediqbalsaleem/Documents/easasoft/Testcb/node_modules/loopback/node_modules/async/lib/async.js:251:17\n    at done (/Users/mohamediqbalsaleem/Documents/easasoft/Testcb/node_modules/loopback/node_modules/async/lib/async.js:132:19)\n    at /Users/mohamediqbalsaleem/Documents/easasoft/Testcb/node_modules/loopback/node_modules/async/lib/async.js:32:16\n    at /Users/mohamediqbalsaleem/Documents/easasoft/Testcb/node_modules/loopback/node_modules/async/lib/async.js:248:21\n    at /Users/mohamediqbalsaleem/Documents/easasoft/Testcb/node_modules/loopback/node_modules/async/lib/async.js:572:34\n    at /Users/mohamediqbalsaleem/Documents/easasoft/Testcb/node_modules/loopback/common/models/acl.js:447:17\n    at /Users/mohamediqbalsaleem/Documents/easasoft/Testcb/node_modules/loopback/common/models/role.js:268:21"


    }
}

node.js

acl

loopbackjs

strongloop

回答 2

Stack Overflow用户

发布于 2016-03-25 19:09:38

这可能是由于环回中关系的默认ACL行为造成的。从文档中：

默认情况下，所有相关模型方法都设置了DENY all

。您需要显式授予访问权限。ACL不从目标模型的端点继承。因此，例如，即使图书模型的默认ACL是ALLOW for GET /books，路由GET /user/{id}/books的默认值仍然是DENY ALL。

https://docs.strongloop.com/display/public/LB/Accessing+related+models

您需要显式设置/teamusers/{id}/tasks的ACL。

票数 0

Stack Overflow用户

发布于 2017-05-11 09:29:09

在“User User”模型中，你的基本模型是"User“。它继承了它的特性。你可以通过简单的方式覆盖它-

只需用你的"ACL“覆盖父母的"ACL”-

{
  "name": "teamuser",
  "base": "User",
  "idInjection": true,
  "options": {
    "validateUpsert": true
  },
  "properties": {
    "empid": {
      "type": "number",
      "required": true
    },
    "designation": {
      "type": "string"
    }
  },
  "validations": [],
 "relations": {
    "tasks": {
      "type": "hasMany",
      "model": "task",
      "foreignKey": "userid"
    }
  },
 "acls": [
  {
      "principalType": "ROLE",
      "principalId": "$everyone",
      "accessType": "READ",
      "permission": "ALLOW"
    }
 ],
  "methods": {}
}