Dynamic route level of security

Getting Help
1

Hello guys, I’m doubt if go lang can support dynamic routes.
I have two users on my database. In one user “user1” i assign to access dashboard and administrator by displaying in template the access link of dashboard and administrator like shown bellow.

aaa

The “user2” is assign to access dashboard.

Capture

Now, when i log-in using the “user2” im still able to access the administrator by typing Administrator on the address bar because Administrator is still on the main func, which is i don’t want for user2 to access.

fff

How to handle like this scenario. Thanks in Advance.

2

Which authentication mechanism are you using at the moment? You should use a middleware and implement some kind of ACL in order to prevent users accessing forbidden routes.
Check this post and inspect the way withLogging and withTracing are implemented.

3

Thanks, Im using database authentication.

4

@matiasb i got it yeah… thanks bro

1 Like
5

Cool, no problem!

6

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.