Same App different DB/Access control

Frappe Framework Permissions
1

I’m looking to build an application where users will be able to create/read/update/delete data and that belongs to a certain domain/private DB without needing to maintain several apps in parallel.

is there a way to define such access control without needing to deploy the application several times?

example:
i have 10 shops which need to use the same app but in different locations of the city; each shop operator needs to only be able to do CRUD on their data but not the other shops data. while some special shop operators/managers/admins could possibly access the data from a collection of them depending on their role.

Another way to describe it:
is it possible to have different roles do CRUD on the same doctype but each in their own role and don’t have access to other roles’ data.

I was not able to find info on this in the documentation.

2

Hi,

May be that what your looking for
https://frappeframework.com/docs/user/en/bench/guides/setup-multitenancy

1 bench with the same app and multi-sites

1 Like
3

for your case, the standard user permission feature is the best fit.

4

Thank you @FHenry , does this mean that, when we update the app, we need to update it for every site?

5

@szufisher care to elaborate more how to achieve it using user permission?