web

web / lib/collections/datasets/access

lib/collections/datasets/access

Access control logic for the Datasets collection.

Defines read, create, update, and delete permissions based on:

• User role (admin has full access)
• Catalog ownership
• Public/private status of datasets and catalogs

Variables

read

const read: Access

Read access: Public datasets in public catalogs, or any dataset in owned catalogs.

create

const create: Access

Create access: Must be authenticated and have access to the target catalog.

update

const update: Access = checkCatalogOwnership

Update access: Only catalog owner or admins can update.

deleteAccess

const deleteAccess: Access = checkCatalogOwnership

Delete access: Only catalog owner or admins can delete.

readVersions

const readVersions: Access

ReadVersions access: Only admins can read version history.