Skip to content

Firebase User Actions

Jump to bottom
Seth Perry edited this page Feb 4, 2017 · 1 revision

Permissible Firebase User Actions

The actions below detail the possible actions that users may perform directly on firebase. Any other actions (sharing, creating grids, etc) will be facilitated through the backend server.

Though the student/teacher division may not exist in the final iteration of this project, they are considered to be separate entities here in they case that they will be separate in the end.

Students

Students are basic users of the site. If the student entity remains separate from the teacher entity, they will not have the ability to oversee boards, only participate in them.

Permissible Firebase Actions

Create

  • Nothing (creation will be facilitated by the backend server, as access to canvases' user lists will be needed)

Read

  • All of the information on the canvases they've either created or been assigned to
  • All of their user information

Update

  • All of their user information
  • All canvas-item information (only for canvases they've been assigned to and for items that aren't being edited by another user)
  • All owned-canvas information (this rule does not include the list of users assigned to the canvas, only canvas metadata)

Delete

  • Nothing (deletion will be facilitated by the backend server, as access to canvases' user lists will be needed)

Teachers

Teachers are users that have all the functionalities of a student user, but also have the ability to oversee boards. What this entails is not yet defined, but may involve having the ability to see the individual students' CraftML code.

Permissible Firebase Actions

Create

  • Nothing (creation will be facilitated by the backend server, as access to canvases' user lists will be needed)

Read

  • All of the information on the canvases they've either created or been assigned to
  • All of their user information
  • Any other information about the canvas (student code, etc)

Update

  • All of their user information
  • All canvas-item information (only for canvases they've been assigned to and for items that aren't being edited by another user)
  • All owned-canvas information (this rule does not include the list of users assigned to the canvas, only canvas metadata)

Delete

  • Nothing (deletion will be facilitated by the backend server, as access to canvases' user lists will be needed)
Clone this wiki locally