Sails app

config/policies.js

@@ -0,0 +1,83 @@
+/**
+ * Policy mappings (ACL)
+ *
+ * Policies are simply Express middleware functions which run **before** your controllers.
+ * You can apply one or more policies to a given controller, or protect just one of its actions.
+ *
+ * Any policy file (e.g. `authenticated.js`) can be dropped into the `/policies` folder,
+ * at which point it can be accessed below by its filename, minus the extension, (e.g. `authenticated`)
+ *
+ * For more information on policies, check out:
+ * http://sailsjs.org/#documentation
+ */
+
+
+module.exports.policies = {
+
+  // Default policy for all controllers and actions
+  // (`true` allows public access) 
+  '*': true
+
+  /*
+	// Here's an example of adding some policies to a controller
+	RabbitController: {
+
+		// Apply the `false` policy as the default for all of RabbitController's actions
+		// (`false` prevents all access, which ensures that nothing bad happens to our rabbits)
+		'*': false,
+
+		// For the action `nurture`, apply the 'isRabbitMother' policy 
+		// (this overrides `false` above)
+		nurture	: 'isRabbitMother',
+
+		// Apply the `isNiceToAnimals` AND `hasRabbitFood` policies
+		// before letting any users feed our rabbits
+		feed : ['isNiceToAnimals', 'hasRabbitFood']
+	}
+	*/
+};
+
+
+/**
+ * Here's what the `isNiceToAnimals` policy from above might look like:
+ * (this file would be located at `policies/isNiceToAnimals.js`)
+ *
+ * We'll make some educated guesses about whether our system will
+ * consider this user someone who is nice to animals.
+ *
+ * Besides protecting rabbits (while a noble cause, no doubt), 
+ * here are a few other example use cases for policies:
+ *
+ *	+ cookie-based authentication
+ *	+ role-based access control
+ *	+ limiting file uploads based on MB quotas
+ *	+ OAuth
+ *	+ BasicAuth
+ *	+ or any other kind of authentication scheme you can imagine
+ *
+ */
+
+/*
+module.exports = function isNiceToAnimals (req, res, next) {
+	
+	// `req.session` contains a set of data specific to the user making this request.
+	// It's kind of like our app's "memory" of the current user.
+	
+	// If our user has a history of animal cruelty, not only will we 
+	// prevent her from going even one step further (`return`), 
+	// we'll go ahead and redirect her to PETA (`res.redirect`).
+	if ( req.session.user.hasHistoryOfAnimalCruelty ) {
+		return res.redirect('http://PETA.org');
+	}
+
+	// If the user has been seen frowning at puppies, we have to assume that
+	// they might end up being mean to them, so we'll 
+	if ( req.session.user.frownsAtPuppies ) {
+		return res.redirect('http://www.dailypuppy.com/');
+	}
+
+	// Finally, if the user has a clean record, we'll call the `next()` function
+	// to let them through to the next policy or our controller
+	next();
+};
+*/