Kaizen
Browse modulesAccessaccess/serverFunctions

Function: requirePermission()

function requirePermission(
   access: AccessService, 
   subject: Subject, 
   action: `${string}.${string}`, 
   options?: RequirePermissionOptions
): Promise<Decision>;

Defined in: server/access/guard.ts:28

Framework-agnostic guard. Evaluates can(...) and throws a structured AccessDeniedError (carrying the explainable decision trace) on deny. Consumers wrap this in their own tRPC middleware / RSC boundary — e.g. oak's vendorOwnerProcedure becomes accessProcedure("product.publish").

Parameters

ParameterType
accessAccessService
subjectSubject
action`${string}.${string}`
optionsRequirePermissionOptions

Returns

Promise<Decision>

the allow Decision (callers may inspect the trace).

On this page