Skip to main content

Interface: AccessControlList

Defined in: service-core/src/security/AccessControlList.ts:70

The access control list provides a generic interface for the storage of user and roles permissions. Each ACL object represents the permission set for a single entity within the system. The entity is identified generically by its universally unique identifier (uuid). Each entry in the ACL records the set of actions granted to a particular user or role (see ACLRecord).

If no record in this ACL matches a given user or role, permission is looked up on the parent ACL instead. ACLs can be chained via single inheritance through the specification of the parentUid. This allows the ability to create complex trees of permissions that can easily inherit control schemes to make the definition of permissions easier.

Properties​

parent?​

optional parent?: AccessControlList

Defined in: service-core/src/security/AccessControlList.ts:79

The parent access control list that this instance inherits permissions from.

parentUid?​

optional parentUid?: string

Defined in: service-core/src/security/AccessControlList.ts:85

The universally unique identifier of the parent AccessControlList that this object will inherit permissions from.

records​

records: ACLRecord[]

Defined in: service-core/src/security/AccessControlList.ts:90

The list of all permission records associated with this access control list.

uid​

uid: string

Defined in: service-core/src/security/AccessControlList.ts:74

The universally unique identifier (uuid) of the entity that the access control list belongs to.