Prevent users from accessing admin panel

mosattler2 years ago

9

• 

  jacobsfletch

  2 years ago

  Would

  access.admin

  work for you?

  https://payloadcms.com/docs/access-control/collections
• 

  mosattler2 years ago

  @808734492645785600

  this makes me think that i need two seperate collections for users and for admins, is that correct?

  
  
  

  (as in, i can "assign" one collection to be the admin collection, and I cannot make this assignment on a per-user level)

• 

  jacobsfletch

  2 years ago

  You could still use a single collection and implement role or user-based access control

  
  
  

  You can either assign a roles select field on the user and check that in your access control function, here's example of that

  https://github.com/payloadcms/template-ecommerce/blob/main/src/access/admins.ts
  
  

  Or go even simpler and just add a checkbox to the user and check

  that
• 

  mosattler2 years ago

  @808734492645785600

  that is super helpful. thansk a bunch!

  
  
  

  sorry

  @808734492645785600

  - one more question regarding this. How do i limit the access to the admin pabel based on a checkbox like that?

  
  
  

  as in, I dont want normal users being able to login in

  /admin
• 

  jacobsfletch

  2 years ago

  Add a

  canAccessAdmin

  checkbox field to the user collection and then in your

  access.admin

  hook, do something like this:

  
  

  export const admins: Access = ({ req: { user } }) => user.canAccessAdmin

• 

  mosattler2 years ago

  makes sense, but what i dont quite understand is where to use the

  const Admins

  of your example after I defined it.

• 

  jacobsfletch

  2 years ago

  On your user collection, like this:

  
  
  

  {
    slug: 'users',
    auth: true,
    access: {
      admin: admins
    }
  }

• 

  mosattler2 years ago

  ahhh

  
  
  

  i really missed the obvious here, didnt I

  
  
  

  thank you so much!

• 

  jacobsfletch

  2 years ago

  No prob!