Which is the best way to set admin to your application?

Ori · December 4, 2020, 3:22pm

This is something the platform makes very easy, you can just grab the caller of a public method and run a check on it to allow admin-only access, eg:

public shared(msg) func doSomething() {
    if (isAdmin(msg.caller)) {
	...

msg.caller there is of type Principal. You could either store this Principal in an array/set of admin Principals, or you could have an admin status flag in the user’s profile. The isAdmin() function above could check for either of these.

A couple of examples from project repos:

github.com

hansl/journey/blob/8a0e45c4dee8f3f786ff7a7880e8bc8a10811144/src/journey/main.mo#L24


var users: [User] = [];
var uniqueId: Nat = 0;
func getUser(id: Principal): ?User {
    func predicate(u: User): Bool {
        u.id == id
    };
    Array.find(predicate, users)
};
func isAdmin(id: Principal): Bool {
    switch (getUser(id)) {
        case (null) {
            return false;
        };
        case (?u) {
            switch (u.role) {
                case (#admin) { return true; };
                case (_) { return false; };
            }
        }

Or

github.com

dfinity/linkedup/blob/91392e689c368ed9d941b983226c3a53990823a4/src/linkedup/utils.mo#L43


  public func includes(x: UserId, xs: [UserId]): Bool {
    func isX(y: UserId): Bool { x == y };
    switch (Array.find<UserId>(xs, isX)) {
      case (null) { false };
      case (_) { true };
    };
  };
  // Authorization
  let adminIds: [UserId] = [];
  public func isAdmin(userId: UserId): Bool {
    func identity(x: UserId): Bool { x == userId };
    Option.isSome(Array.find<UserId>(adminIds,identity))
  };
  public func hasAccess(userId: UserId, profile: Profile): Bool {
    userId == profile.id or isAdmin(userId)
  };
};

Topic		Replies	Views
Differentiation between the methods of obtaining the userPrincipal calling the function Rust	4	567	December 8, 2022
Problems with cross referencing principals Developers	15	1217	July 17, 2021
How to identify app users data in the backend? Developers	13	1590	July 26, 2021
Calling canister on main network needs no authentication Developers	2	537	March 2, 2022
Are user text principal public? Developers	6	1209	January 27, 2022

Which is the best way to set admin to your application?

Related Topics