Sails.js in Action

Chapter 10. Policies and access control

This chapter covers

• Documenting controllers, actions, and routes
• Understanding policies for access control
• Creating policies to manage access to controller actions
• Applying policies to controller actions access control list
• Adding a policy versus access control in the controller action

It’s hard to believe that the journey we’ve taken over the last few chapters was initiated by a love of cats and disdain for dogs. Our job is not to judge but instead fulfill the requirements of our client. In chapters 6 and 7, we created the model and controller actions necessary for a user to create and manage their own identity. In chapter 8, we introduced server-rendered views and backend routes as a way to communicate ...