Payload RBAC beta

[teunmooij]

payload-rbac is now available.

It includes:

• plugin to extend your auth collection(s) with a roles property
• lots of predefined access control functions
• tools to combine access control functions to support more complex situations
• fully compatible with any custom access control functions you might already have

And can be used like this:

const compositeAccess = requireOne(
  requireAll(allowPublished(), allowAnyUser()), // any logged in user can access published documents
  allowUserWithRole('editor'), // editors can access all documents
);

The first major release is scheduled for early next week and will include:

• ability to reference request properties in the where clause