How works ACL - Access control list? about universal-react-apollo-registration

[simpletut]

My understanding is that you want to set multiple user access levels.

Currently you can only restrict access to pages based on if a user is logged in or not.

Please see:

https://github.com/simpletut/Universal-React-Apollo-Registration#restrict-access-authenticated-users-only

If you wish to add additional user access rights, you would need to extend the existing functionality.

For example, if you would like to create ‘user’ and ‘admin’ level access I would suggest the following implementation.

1. Add a ‘userLevel’ field to the ‘Users’ schema. This should contain a numerical value for every user that represent their access rights. For example:

0 = basic
1 = admin

You may need to update the registration process to account for this new field.

2. Whenever user’s login, we are using a higher order component ‘withSession’ and specifically the ‘GET_CURRENT_USER’ query to fetch user data and pass it as props to the relevant components.

My suggestion would be to update the query referenced above to return the new ‘userLevel’ and then create a new higher order component similar to ‘withAuth’ that restricts access dependant to the ‘userLevel’ and your custom criteria.

I will consider adding this feature for future releases.