Add an Authorization Policy to a Form

Prerequisites

To follow the steps in this tutorial, you must understand how Permissions work and can create an Authorization Policy.

• Permissions
• Adding an Authorization Policy

Steps

Associating an authorization Policy with a Form is a two-step process:

• Step 1: Create a form
• Step 2: Add the 'authorization_policies' key to the form

Step 1: Create a form

Assuming you have a simple form that allows changing the user's last name, the configuration file can look like this:

---
name: update_last_name
resource: User
fields:
  last_name:
    validation:
      presence: {}
---
...

Step 2: Add the 'authorization_policies' key to the form

To associate the authorization Policy with the form, add a new key, and then specify the array of policy names associated with this form.

For example, to ensure that only 'Johns' will be able to submit this form, update the configuration to include the policy:

---
name: update_last_name
resource: User
authorization_policies:
  - only_allowed_by_johns
...

Next Steps

Congratulations! You know how to associate an Authorization Policy with a Form. Now you can learn about associating an Authorization Policy with a page: Associating an Authorization Policy with a Page