Authentication & security

Loosely extends Tickets app enhancements

Add this to an entity file with an -auth - prefix

using {
  TicketService.Protocol,
  TicketService.Tickets,
  TicketService.closeTicket
} from './ticket-service';
 
annotate Protocol with @readonly; // alternatively: @insertonly
annotate Tickets with @readonly;
annotate closeTicket with @(requires: 'authenticated-user');
 
annotate Tickets with @(restrict: [
  {
    grant: ['DELETE'],
    to   : 'admin',
    where: `state_ID = 5`
  },
  {
    grant: [
      'READ',
      'CREATE',
      'UPDATE'
    ],
    to   : 'admin'
  }
]);

In package.json file, add this:

"cds": {
    "requires": {
      "auth": {
        "kind": "mocked",
        "users": {
          "admin": {
            "password": "admin",
            "roles": ["admin"]
          }
        }
      }
    }
  }