The post permission controls how new documents are created in a collection. It defines which properties can be included in the request body, which ones should be omitted before database insertion, how the result is filtered, and which real-time events are triggered upon document creation.
pick Specifies the allowed properties in the request body. Any property not listed here will be rejected.
omit Properties to be removed from the request body before being stored in the database.
project Defines the fields that should be included in the response after creating the document.
io Describes real-time events that should be triggered upon document creation, specifying which users should receive notifications.
{
"collections": {
"todos": {
"schema": {...},
"permissions": {
"user": {
"post": {
"pick": ["title"],
"omit": ["user"],
"project": ["_id", "title"],
"io": {
"$.user": ["_id"]
}
}
}
}
}
}
}