CODEWITHSUNDEEP
javasecurityneo4j
Andy Till
Andy Till

Reputation: 3511

Prevent some users modifying a Neo4J node

In my Neo4J database, I want to prevent particular users modifying nodes. I would like to allow any user to be a 'guest' and view data and certain users to be admins and view and edit as much data as they like.

This needs to be part of the neo4j server, I would rather not implement a webservice over neo4j.

Upvotes: 1

Views: 846

Answers (2)

Nicholas
Nicholas

Reputation: 7501

You may be able to perform what you are looking for by using SecurityRule. There's a better description of what this does here.

Basically what this allows you to do is set up HTTP authorization on specific URL's. What you could do is check that URL to see what node it's attempt to access and if the user is not allowed to mutate it, deny the request.

Upvotes: 1

espeed
espeed

Reputation: 4814

You can run a Neo4j Server slave in read-only mode, as a mirror of the read/write master. Or you can implement node-level permissions, like you would in a RDBMS.

Upvotes: 2

Related Questions