Skip to main content
server.GenericAccessDefinition Immutable schema authoring and value constructors.

Hierarchy

  • AccessPolicies ↳ GenericAccessDefinition

Properties

role

• role: (key: string) => Extract<RoleRef, { kind: "declared" }>

Type declaration

▸ (key): Extract<RoleRef, { kind: "declared" }> A declared role, by its stable key.
Parameters
Returns
Extract<RoleRef, { kind: "declared" }>

person

• person: (key: string) => Extract<Holder, { kind: "person" }>

Type declaration

▸ (key): Extract<Holder, { kind: "person" }>
Parameters
Returns
Extract<Holder, { kind: "person" }>

service

• service: (name: string) => Extract<Holder, { kind: "service" }>

Type declaration

▸ (name): Extract<Holder, { kind: "service" }>
Parameters
Returns
Extract<Holder, { kind: "service" }>

group

• group: (resource: AccessResourceRef, memberPermission: string) => Extract<Holder, { kind: "group" }>

Type declaration

▸ (resource, memberPermission): Extract<Holder, { kind: "group" }> The holders of memberPermission on a group resource.
Parameters
Returns
Extract<Holder, { kind: "group" }>

delegate

• delegate: (client: DelegationClient, input: DelegationInput) => Promise<DelegationGrant>

Type declaration

▸ (client, input): Promise<DelegationGrant>
Parameters
Returns
Promise<DelegationGrant>

roles

• Readonly roles: Pick<{ tenant: (id: GenericId<string>) => Extract<RoleRef, { kind: "tenant" }> ; create: (ctx: AccessMutationCtx, input: { scope: { type: string ; key: string } ; resourceType: string ; name: string ; permissions: string[] ; assignment?: { maxDuration?: number ; reasonRequired?: boolean ; guests?: boolean } }) => Promise<Extract<RoleRef, { kind: "tenant" }>> ; update: (ctx: AccessMutationCtx, role: Extract<RoleRef, { kind: "tenant" }>, changes: Partial<Pick<RoleDefinitionDocument, "name" | "permissions" | "maxDuration" | "reasonRequired" | "guests">>) => Promise<void> ; remove: (ctx: AccessMutationCtx, role: Extract<RoleRef, { kind: "tenant" }>) => Promise<void> }, "tenant">

Methods

inputs

▸ inputs(): string[]

Returns

string[]

Inherited from

AccessPolicies.inputs

policy

▸ policy(type, options?): SchemaAccessPolicy

Parameters

Returns

SchemaAccessPolicy

Inherited from

AccessPolicies.policy

assignmentsPolicy

▸ assignmentsPolicy(options?): SchemaAccessPolicy

Parameters

Returns

SchemaAccessPolicy

Inherited from

AccessPolicies.assignmentsPolicy

requestsPolicy

▸ requestsPolicy(): SchemaAccessPolicy

Returns

SchemaAccessPolicy

Inherited from

AccessPolicies.requestsPolicy

roleDefinitionsPolicy

▸ roleDefinitionsPolicy(): SchemaAccessPolicy

Returns

SchemaAccessPolicy

Inherited from

AccessPolicies.roleDefinitionsPolicy

assignments

▸ assignments(policy?): ReturnType<typeof assignmentsTable>

Parameters

Returns

ReturnType<typeof assignmentsTable>

Inherited from

AccessPolicies.assignments

requests

▸ requests(): ReturnType<typeof requestsTable>

Returns

ReturnType<typeof requestsTable>

Inherited from

AccessPolicies.requests

roleDefinitions

▸ roleDefinitions(): ReturnType<typeof roleDefinitionsTable>

Returns

ReturnType<typeof roleDefinitionsTable>

Inherited from

AccessPolicies.roleDefinitions

resource

▸ resource(type, key): AccessResourceRef

Parameters

Returns

AccessResourceRef

describe

▸ describe(): AccessDescription

Returns

AccessDescription