Giving a user one permission, and nothing more, through groups (BOU-853):
rights are never granted to a user directly. Options are ranked by what
else they give, read from their previews (IRightsPreview).
Giving a user one permission, and nothing more, through groups (BOU-853): rights are never granted to a user directly. Options are ranked by what else they give, read from their previews (`IRightsPreview`).
(blast-radius preview)How many rights the change preview describes gives beyond the one asked:
one per user and permission gained, less one.
How many rights the change `preview` describes gives beyond the one asked: one per user and permission gained, less one.
(extra preview permission scope)What else the user preview names gains: other permissions, and
permission itself where it reaches beyond scope.
What else the user `preview` names gains: other permissions, and `permission` itself where it reaches beyond `scope`.
(fixes? preview permission scope)Whether the user preview names gains permission in a scope admitting
scope, {scope-key value}: {} asks for it everywhere.
Whether the user `preview` names gains `permission` in a scope admitting
`scope`, {scope-key value}: {} asks for it everywhere.(rank options permission scope)options, [{:kind :preview ..}], that give permission in scope: a
:join or :narrow whose preview does not is dropped. Each gets :extra
(extra) and :radius, blast-radius and one more for a wider scope than
asked; the smallest
first, a join before an assignment on a tie. A new managed role, then a new
group, always come last.
`options`, [{:kind :preview ..}], that give `permission` in `scope`: a
`:join` or `:narrow` whose preview does not is dropped. Each gets `:extra`
(`extra`) and `:radius`, `blast-radius` and one more for a wider scope than
asked; the smallest
first, a join before an assignment on a tie. A new managed role, then a new
group, always come last.(smallest-role roles permission)The name of the role in roles, {role {:permissions #{..}}}, holding
permission with the fewest others, by name on a tie. Nil when none does.
The name of the role in `roles`, {role {:permissions #{..}}}, holding
`permission` with the fewest others, by name on a tie. Nil when none does.cljdoc builds & hosts documentation for Clojure/Script libraries
| Ctrl+k | Jump to recent docs |
| ← | Move to previous article |
| → | Move to next article |
| Ctrl+/ | Jump to the search field |