applicake/doorkeeper — Issue #40: Using Scopes for attributes of model
Author: nambrot
Created: 2012-01-28 01:30:37+00:00
State: open

Hi,

I am new to GitHub and OAuth in general, so finding Doorkeeper was a blessing for a good dive. I am currently exploring how to use doorkeeper for a public API, and was wondering how I would go about using doorkeepers scopes to limit access to attributes, not complete actions. Like in the provided examples, we could have like a birthday attribute on the profiles (or users), but only have it visible for a particular application, if:

- the current ressource owner is the requested user
- the other users have provided that scope

Am I on the right track on using the provided scopes, or would I have to come up with my own access control?