Interface: CreateAccessServicesOptions
Defined in: server/access/create-access-services.ts:16
Properties
attributes?
optional attributes?: AttributeRegistry;Defined in: server/access/create-access-services.ts:22
Authorization attribute registry (defineAuthzAttributes()).
audit?
optional audit?: AuditLevel;Defined in: server/access/create-access-services.ts:26
Decision-audit level (defaults to "sensitive").
catalog?
optional catalog?: PermissionCatalog<`${string}.${string}`>;Defined in: server/access/create-access-services.ts:20
In-code permission catalog (definePermissions()).
getActorId
getActorId: () => string | null;Defined in: server/access/create-access-services.ts:18
Returns the current actor's ID for audit fields, or null for system.
Returns
string | null
logger?
optional logger?: Pick<Logger, "warn">;Defined in: server/access/create-access-services.ts:35
Diagnostic sink for invalid persisted access data. Defaults to console.
onDecision?
optional onDecision?: OnDecision;Defined in: server/access/create-access-services.ts:33
Off-hot-path decision-audit hook (defaults to a no-op). Receives every
decision qualifying under audit. A throwing/rejecting hook never fails
the can() decision. Pass createTableDecisionSink() to persist to the
shipped rbac_decision_log table, or supply your own audit store.
prisma?
optional prisma?: PrismaClient<PrismaClientOptions, never, DefaultArgs>;Defined in: server/access/create-access-services.ts:42
Explicit Prisma client to use INSTEAD OF the ambient registry. For
callers (e.g. seedRoles) that accept a client as an argument and must
target it specifically rather than whatever happens to be registered
globally.
resources?
optional resources?: ResourceAuthzRegistry;Defined in: server/access/create-access-services.ts:24
Resource authz registry (defineResourceAuthz()) powering authorizedWhere.