Hey!
I'm in the final stage of my app, now reviewing how user permissions work.
I have just made all my API calls private by enabling the "Authentication Required", which works fine, but now I want to limit some API calls to admin users only.
I have created a simple text field in my user database for "Permissions", which is either set to "user" or "admin".
My first thought was to make an initial "Get Record" call at the top of all my "admin" api calls, to check the user permission of that user before proceeding. Only issue is that I haven't found a way to get a user record by auth token.
Let me know what's the best way to do this, thanks!