Canonical caller and manifest-level authorization helpers.
New protocols opt into enforcement with
:authorization {:caller :member} on a capability definition. Legacy
capabilities without that key retain their current behavior while they are
migrated deliberately. Actor identity always comes from MoM's top-level
:caller envelope, never from :event/data.
Canonical caller and manifest-level authorization helpers.
New protocols opt into enforcement with
`:authorization {:caller :member}` on a capability definition. Legacy
capabilities without that key retain their current behavior while they are
migrated deliberately. Actor identity always comes from MoM's top-level
`:caller` envelope, never from `:event/data`.(admin? payload admin-roles)(authorize-capability payload capability)Returns nil when authorized, otherwise a stable error response.
Enforcement is opt-in. :caller :member requires MoM's canonical membership
envelope. :caller :system is reserved for trusted lifecycle/effect callbacks.
Capability :roles are enforced only after caller provenance is established.
Returns nil when authorized, otherwise a stable error response. Enforcement is opt-in. `:caller :member` requires MoM's canonical membership envelope. `:caller :system` is reserved for trusted lifecycle/effect callbacks. Capability `:roles` are enforced only after caller provenance is established.
(caller payload)(caller-membership-id payload)(caller-player-name payload)(caller-roles payload)(claimed-player-name payload)(error status code message)(member-caller? payload)(normalize-role role)(owner-caller? payload)(system-caller? payload)cljdoc builds & hosts documentation for Clojure/Script libraries
| Ctrl+k | Jump to recent docs |
| ← | Move to previous article |
| → | Move to next article |
| Ctrl+/ | Jump to the search field |