shoppinpal / multi-tenant-loopback-example Goto Github PK

Reference: https://www.owasp.org/index.php/Testing_for_NoSQL_injection

Try to break the following rules via NoSQL injection:

• orgAdminA can only LIST stuff which is specific to orgA
• orgAdminB can only LIST stuff which is specific to orgB

How easy would it be to upgrade to loopback v3?

no way to create dynamic role

Write CURL requests to demo and make any code changes needed:

1. Have all 4 store admins create a StuffModel that they own.
2. Demo that 2 store admins from orgA can GET /api/StuffModels and it lists all the stuff across OrgA
3. Demo that store admins from orgA cannot GET any stuff from orgB
4. Demo that 2 store admins from orgB can GET /api/StuffModels and it lists all the stuff across OrgB
5. Demo that store admins from orgB cannot GET any stuff from orgA

Any ideas on a way around this: https://docs.strongloop.com/display/public/LB/Using+current+context

Hi,
If my user have multiple roles in organization . So, how we can assign multiple roles to single user.
In this case we are having Team Model which is acting as Role Mapping and Role model both . So, If we don't want to expose Team Model then how can we add multiple roles to an User that too by keeping tenantization intact.