waterline - Sails.js - protect blueprint associations using policies -

in order create many-to-many association between models, use blueprints access like:

/api/item/1/tags/2 

how can protect action using policies?

this action doesn't seem fit of find/create/update/destroy policies.

there's no need custom routing here; blueprint you're referring called populate, can protected in config/policies.js with:

itemcontroller: {    populate: 'somepolicy'  }