Feathers - Limit service response to data owned only by the current user

In Pens, the goal is to restrict the availability of data on a particular service to data owned only by a logged in user.

Assuming I am using Feathers authentication, the data available in this service is stored in the database table and the table column containing the user id is called user_id

, will this hook achieve the goal?

If not, what needs to be changed?

In case it is important to be able to answer the question, I use Sequelize and Postgres.

const { authenticate } = require('feathers-authentication').hooks;

const { queryWithCurrentUser } = require('feathers-authentication-hooks');
const { associateCurrentUser } = require('feathers-authentication-hooks');

const readRestrict = [
  queryWithCurrentUser({
    idField: 'id',
    as: 'user_id'
  })
];

const modRestrict = [
  associateCurrentUser({
    idField: 'id',
    as: 'user_id'
  })
];

module.exports = {
  before: {
    all:    [ authenticate('jwt') ],
    find:   [ ...readRestrict ],
    get:    [ ...readRestrict ],
    create: [ ...modRestrict ],
    update: [ ...modRestrict ],
    patch:  [ ...modRestrict ],
    remove: [ ...modRestrict ]
  },

  after: {
    all:    [],
    find:   [],
    get:    [],
    create: [],
    update: [],
    patch:  [],
    remove: []
  },

  error: {
    all:    [],
    find:   [],
    get:    [],
    create: [],
    update: [],
    patch:  [],
    remove: []
  }
};

      

        
        
        
      

    

This seems to work, but since I'm a Feathers noob, I thought I'd better check before it gets put into the wild to make sure there isn't a case where I don't know it will cause leaks.