|
@@ -105,6 +105,21 @@ module.exports = async (dbName='hipstagram') => {
|
|
|
static get guestRelations(){
|
|
|
return ["comments", "directs"]
|
|
|
}
|
|
|
+
|
|
|
+ static get defaultPermissions(){
|
|
|
+ return {
|
|
|
+ //savable refs, objectid's, words like 'tags' or 'roles'
|
|
|
+ read: ['owner', 'user'],
|
|
|
+ write: ['owner'],
|
|
|
+ create: ['user'],
|
|
|
+ delete: ['owner', 'admin'],
|
|
|
+
|
|
|
+ /*permission
|
|
|
+ * TODO: permissions for read and write permissions
|
|
|
+ *
|
|
|
+ */
|
|
|
+ }
|
|
|
+ }
|
|
|
}
|
|
|
SlicedSavable.addClass(Post)
|
|
|
|