Browse modulesAccess
access/shared
Interfaces
- AccessContext
- AccessRequest
- AttributeDef
- AttributeRegistry
- CapabilitySnapshot
- CompiledGrant
- ConditionResult
- Decision
- DecisionTraceEntry
- EvaluateAccessOptions
- Grant
- PermissionCatalog
- PermissionDef
- PermissionSnapshot
- ResourceAuthzDef
- ResourceAuthzRegistry
- ResourceSelector
- Role
- RoleAssignmentMetadata
- Subject
Type Aliases
- AccessRecord
- AttributeRegistryInput
- AttributeSource
- AttributeType
- AuthorizedWhereResult
- CreateGrantInput
- CreateGroupMembershipInput
- CreatePermissionInput
- CreateRoleInput
- GrantScope
- GrantScopeKind
- MaxAssignableScope
- Permission
- RoleKind
- SelectorValue
- SubjectType
- UpdateRoleInput
Variables
- createGrantInputSchema
- createGroupMembershipInputSchema
- createPermissionInputSchema
- createRoleInputSchema
- grantScopeSchema
- permissionSchema
- resourceSelectorSchema
- roleAssignmentMetadataSchema
- subjectSchema
- subjectTypeSchema
- updateRoleInputSchema
Functions
- collectConditionIds
- collectSelectorAttributePaths
- defineAuthzAttributes
- definePermissions
- defineResourceAuthz
- evaluateAccess
- hasCoarsePermission
- isWithinEffectiveDates
- sanitizeContextToDeclared
- scopeChain
- scopeFromKey
- scopeKeyOf
References
AccessDeniedError
Re-exports AccessDeniedError
AccessNotFoundError
Re-exports AccessNotFoundError
MissingAuthorizationContextError
Re-exports MissingAuthorizationContextError
PrivilegeEscalationError
Re-exports PrivilegeEscalationError
UndeclaredAttributeError
Re-exports UndeclaredAttributeError