Authorization

• Go to the Authorization section in your project to manage roles and permissions.
• Create Roles (e.g., admin, manager, member) that represent the different user types in your application.
• Create Permissions that represent actions on your resources (e.g., orders.read, orders.create, orders.update, orders.delete).
• Link Roles to Permissions using a Role Permission mapping so each role has the appropriate capabilities.
• Assign Roles to Users via a User Role mapping so that each user inherits the permissions of their assigned roles.
• At runtime, SWAIN checks a user’s roles and permissions to determine which API endpoints they can access; leave all endpoints open if you do not require fine‑grained access control.