In my Neo4J database, I want to prevent particular users modifying nodes. I would like to allow any user to be a ‘guest’ and view data and certain users to be admins and view and edit as much data as they like.
This needs to be part of the neo4j server, I would rather not implement a webservice over neo4j.
You may be able to perform what you are looking for by using
SecurityRule. There’s a better description of what this does here.Basically what this allows you to do is set up HTTP authorization on specific URL’s. What you could do is check that URL to see what node it’s attempt to access and if the user is not allowed to mutate it, deny the request.