Entity Permissions
Last updated
The Entity Permissions capability identifies resources whose access can depend on permission-key grants for individual resource instances. Grants can address a User, Role, or Department; supported keys and their endpoint-specific effects remain resource-specific.
A directly controlled resource owns its Entity Permissions. Its Model Definition states whether it exposes an entityPermissions relation, and its endpoints state whether they accept entity_permissions or apply a Restricted Scope.
A dependent resource can derive effective Entity Permissions from a documented parent resource. It does not accept or persist independent grants unless its own Model Definition also declares direct Entity Permissions.
The Restricted Scope applies direct or inherited Entity Permissions to queries and operations. Administration, ownership, and other alternatives remain endpoint-specific.
Entity Permissions grant named operations on a resource instance. Targetables select users or departments without creating permission-key grants.
The Entity Permissions introduction defines the shared grant structure and enforcement model.
Last updated