Important !!
channels-users-roles
https://github.com/couchbaselabs/mini-hacks/tree/master/channels-users-roles
=====
level-1：未註冊使用者(發文要核準)
level-2：註冊使用者(發文不用核準)
level-3：版主(可核準或取消)
程式動態新增role
藍線：建立role
綠線：回覆結果
．角色(Roles)和使用者(users) 是可以被授權 而訪問 Channels.
使用者(users) 被附予角色(Roles)，則可以 用角色的授權 進而訪問 Channels
．channel(channelname) 有讀取權限
access(doc.owner, channelname); 給 寫入權限
requireUser(doc.owner) requireRole(doc.role) 也可以給 寫入權限
document content (using throw) ???
讀和寫權限是分開的。
寫的權限完全是用sync function控制：除非sync function拒絕.........
Write
requireUser(username) 是否是該使用者(User)
requireRole(rolename) 是否有該角色(Role)
requireAccess(channels) 是否有該Channel
curl -vX POST -H 'Content-Type: application/json' \ --cookie 'SyncGatewaySession=d007ceb561f0111512c128040c32c02ea9d90234' \ :4984/db/ \ -d '{"type": "review", "role": "level-1", "owner": "jens"}'
{"type": "review", "role": "level-1", "owner": "jens"} =>
type => doc.type
role => doc.role
owner => doc.owner
So
doc.type review
doc.role level-1
doc.owner jens
=====
curl -vX POST -H 'Content-Type: application/json' \ --cookie 'SyncGatewaySession=6e7ce145ae53c83de436b47ae37d8d94beebebea' \ :4984/db/ \
-d '{"type": "review", "role": "level-2", "owner": "andy", "restaurant_id": "123"}'
So
doc.type review
doc.role level-2
doc.owner andy
doc.restaturant_id 123
=====
curl -vX POST -H 'Content-Type: application/json' \ --cookie 'SyncGatewaySession=3a5c5a67ff67643f8ade175363c65354584429e9' \ :4984/db/ \ -d '{"type": "profile", "name": "william", "role": "level-3"}'
So
doc.type profile
doc.name william
doc.role level-3