Sharing entities with user groups

[iBobik]

Hi, when "evaluating Evolu“ it is good to know your vision about features, could you please share your plans and ideas?

What I would like to have:

• when I have multiple related tables (columns like parent_id) I would like to let the framework make it (parent and its child) accessible to other users (different mnemonic)
• with different access levels - can view, can create, can update, can add access, can update access
• roles

I can imagine it could be implemented like this:

• hierarchical keys, so shareable object (parent and its children) will be encrypted by its own private key
• table managing the access (shareable object type, id, user public key, role, custom metadata)
• when the sharing is initiated user will select object and role and encode it to the „sharing link“ which he will send to the other user
• sharing link will have in the hash part (not send to the server) object private key and JWT with object metadata and role
• other user when opened the link will contact sync server send his public key and JWT
• sync server will start to sync the object with the other user and enforce the access (will not allow to update object when only read is allowed)
• access will be also enforced in the client, so it will not accept update messages based on the user signature

What you you think?

[iBobik]

Related: #179 #219

[steida]

Wait for the release. I think you will like it ;-)

You described pretty well what Evolu wants/needs.

[negue]

once the new release arrives I'm soooo looking forward to all the ideas how to realize XYZ - will be soo good 👀