Finer grained permissions about kinto HOT 2 CLOSED

Use-case exposed by @almet and @Natim :

A collection has a schema. A formbuilder needs to read that schema to render the form. In order to read that collection object, we currently need to set read on the collection, which also gives the permissions to read every records! If the form is a poll for example, we only want to give record:create, but certainly not the permission to read every record.

Workaround: use two collections: one for the schema, one for the records.

from kinto.

Workaround: use two collections: one for the schema, one for the records.

This means that you need to create a collection with a JSONSchema validator to validate that the schema you enter in the form list is valid.

from kinto.