Access control & CRUD actions
Table of contents
Access control defines which actions your users can perform on data records. Doypp provides granular, visual control over standard CRUD (Create, Read, Update, Delete) operations at both the page and view level.
By configuring access controls, you can tailor identical views for different user roles—for example, giving all users read access while reserving creation and deletion for authorized staff.
Create
Enabling the Create permission on a list view provides a mechanism for users to submit new records.
When enabled:
- Doypp automatically places a ”+” (New) button in the view’s action header or floating action bar.
- Tapping the button launches an auto-generated input form populated with all non-protected fields configured on the model.
- Once submitted, the new record is saved and immediately reflected in the active list.
Example: Enabling creation on a post list view:
Edit
The Edit permission allows users to modify existing records. You can enable editing in two primary locations:
1. In List Item Menus
Enabling edit on a list view adds an “Edit” option to each card’s contextual overflow menu:
2. On Detail / Pop-up Pages
If a detail page is linked to a record, enabling edit places a dedicated pencil icon directly in the page header:
Delete
The Delete permission enables users to permanently remove a data record.
To safeguard against accidental data loss:
- Confirmation Prompt: When a user taps “Delete”, Doypp automatically displays a confirmation modal requiring explicit verification before the record is purged.
- Relational Integrity: Doypp automatically handles linked records according to your model’s relationship cascade policies.
[!IMPORTANT] Best Practice for Deletion Access: In collaborative environments, it is recommended to restrict Delete permissions to administrators or the original author of the record, preventing accidental or unauthorized data deletion.
Related Topics
- Protect fields against unauthorized modification using Data Properties: Protected Fields.
- Set up role-based views in Custom User Types & Roles.
- Restrict sensitive pages in the drawer to Administrators.