Interface: Grant

Defined in: shared/access/types.ts:87

An ALLOW binding of subject → role within a scope, optionally narrowed by a selector (indexable fast path) and/or an ABAC condition (ConditionLogicNode, for non-indexable / cross-cutting rules). Allow-only in v1. Binds to role IDENTITY, not a frozen version.

PropertiesCopy Anchor Link

condition?Copy Anchor Link

optional condition?: ConditionLogicNode;

Defined in: shared/access/types.ts:93

effectiveEnd?Copy Anchor Link

optional effectiveEnd?: string | null;

Defined in: shared/access/types.ts:95

effectiveStart?Copy Anchor Link

optional effectiveStart?: string | null;

Defined in: shared/access/types.ts:94

idCopy Anchor Link

id: string;

Defined in: shared/access/types.ts:88

roleIdCopy Anchor Link

roleId: string;

Defined in: shared/access/types.ts:91

scopeCopy Anchor Link

scope: GrantScope;

Defined in: shared/access/types.ts:89

selector?Copy Anchor Link

optional selector?: ResourceSelector;

Defined in: shared/access/types.ts:92

subjectCopy Anchor Link

subject: Subject;

Defined in: shared/access/types.ts:90