isActionAllowed #

Specifies if an action is allowed, denied or conditional based on the rights provided as the first argument:

• allowed is returned when an action is authorized without condition
• conditional is returned when the authorization depends on a closure
• denied is returned when the action is forbidden

An action is defined as a pair of action and controller (mandatory), plus an index and a collection(optional).

isActionAllowed(rights, controller, action, index, collection) #

Return Value #

Returns either allowed, denied or conditional.

Usage #

kuzzle.security.getMyRights((err, rights) => {
  if (!err) {
    // returns either "allowed", "denied" or "conditional"
    var allowed = kuzzle.security.isActionAllowed(rights, 'read', 'get', 'index1', 'collection1');
  }
});