How best to model Application Roles and Permission

[stevenson_cunan]

Hi I want to create a way to specify roles and permission for an application.ie the api of my application.
I was wondering how to model it.

I was thinking something as simple as
(:User)-[:HAS_ROLE]->(:Role)
(:Role)-[:HAS_PERMISSION]->(:FEATURE)
taking to consideration:https://neo4j.com/docs/2.1.5/examples-acl-structures-in-graphs.html

Please advice.

Best Regards,
Stevenson Lee

[bratanic_tomaz]

Hi Lee,

If this model captures all the scenarios of your application then it looks great. Keeping it simple is the way to go IMO.

If you will run into more complex structures of identity management then I suggest you check more resources:

• https://www.youtube.com/watch?v=5hVogEL3CGY
• https://neo4j.com/use-cases/identity-and-access-management/

[stevenson_cunan]

Hi thanks for the comment.
After thinking some more.
What would be the problems of just using labels as roles?

Best Regards,
Stevenson Lee