How do I enforce that only admins can execute sensitive actions?
Thanks, @tyler94
This can easily be achieved using CommandPermissions
in your metadata.
Hasura’s always had a strong RBAC story and this is still true in PromptQL! By configuring these permissions, you can explicitly set which role(s) can execute any custom business logic in your application. ModelPermissions
and TypePermissions
also allow for controlling access to certain models and even their output types.
You can lear more about all three here.