Limited Policies Information

[br41nslug]

https://directus.io/docs/guides/auth/access-control

I'd expect to find some more information here about Policies, how they work, how they are merged when using multiple and such. There is some mention of policies but are often still referred to as permissions which can be confusing.

As a user starts with no permissions, and multiple policies can set a permission on the same collection and actions. Applying policies is additive - each policy can add to existing permissions, but not take them away.

^ is all I could find about merging of policies which is technically correct but also not very descriptive.

We used to have a developer blog post going into deeper detail i think but these do not live in the old codebase so I am unable to link to it.

[linear]

DX-831 Outdated Access Control Information