Anyone got any suggestions for performing RBAC checks on an api 'list' endpoint?
Currently, I'm thinking of using GetImplicitPermissionsForUser, then building a DB query filter from that.
The other option is to filter after querying, but that seems less efficient, especially with pagination as it might mean over-querying and filtering (and potentially re-querying to 'fill' the page)
But the former could be an issue if the user has access to lots of resources, and if the pagination is performed here, it essentially moves sorting out of the DB 🙈
@absolutejam good question! Can you create a github issue to put all details there? https://github.com/casbin/casbin/issues
good!
Join the conversation
Sign up to reply, like and follow topics.
Suggested Topics
Want to read more? Browse other topics in General or view latest topics.
1 / 5
Aug 2025
This forum runs on Casnode, an open-source forum with the look and features of Discourse, built with Go and Next.js. See what it can do on the Casnode demo site.
Try the Casnode demo