Q: 2 Big missing security features makes me sad about this deal.
Hi, I have been using NocodeBackend for a few months now, but I think you are missing two important security features that I need—and that I think many people need for this to be usable.
- The auth table needs to allow roles. Some users are viewers, some are writers, and some are admins.
- How can I make system registration available only to admins, so only users approved by an admin can use your system? Right now, if I activate auth, anyone can register. Once registered, they can read all the tables without limits on SHARED (auth required, cross-admin). Only RLS will prevent this, but it is not usable because admins cannot choose which users can read it.
The only solution at the moment is to use a backend that handles this, but I would expect NocodeBackend to take care of what I need on the backend, at least for database purposes.