Permission assertions for admin access control.
These wrappers throw typed ex-info (:type :forbidden) when a permission
check fails, so they live in the shell — the pure decision logic (the
can-*? predicates and explain-admin-access-denial) stays in
boundary.admin.core.permissions. HTTP handlers call these guards; the
platform error interceptor maps :forbidden to a 403 response.
Permission assertions for admin access control. These wrappers throw typed `ex-info` (`:type :forbidden`) when a permission check fails, so they live in the shell — the pure decision logic (the `can-*?` predicates and `explain-admin-access-denial`) stays in `boundary.admin.core.permissions`. HTTP handlers call these guards; the platform error interceptor maps `:forbidden` to a 403 response.
(assert-can-access-admin! user)(assert-can-access-admin! user admin-config)Assert user can access admin, throw exception if not.
Returns true if permission granted. Throws ExceptionInfo with :type :forbidden if access denied.
Assert user can access admin, throw exception if not. Returns true if permission granted. Throws ExceptionInfo with :type :forbidden if access denied.
(assert-can-create-entity! user entity-name)(assert-can-create-entity! user entity-name entity-config)Assert user can create entity, throw exception if not.
Returns true if permission granted. Throws ExceptionInfo with :type :forbidden if access denied.
Assert user can create entity, throw exception if not. Returns true if permission granted. Throws ExceptionInfo with :type :forbidden if access denied.
(assert-can-delete-entity! user entity-name)(assert-can-delete-entity! user entity-name entity-config)(assert-can-delete-entity! user entity-name entity-config record)Assert user can delete entity, throw exception if not.
Returns true if permission granted. Throws ExceptionInfo with :type :forbidden if access denied.
Assert user can delete entity, throw exception if not. Returns true if permission granted. Throws ExceptionInfo with :type :forbidden if access denied.
(assert-can-edit-entity! user entity-name)(assert-can-edit-entity! user entity-name entity-config)(assert-can-edit-entity! user entity-name entity-config record)Assert user can edit entity, throw exception if not.
Returns true if permission granted. Throws ExceptionInfo with :type :forbidden if access denied.
Assert user can edit entity, throw exception if not. Returns true if permission granted. Throws ExceptionInfo with :type :forbidden if access denied.
(assert-can-view-entity! user entity-name)(assert-can-view-entity! user entity-name entity-config)Assert user can view entity, throw exception if not.
Returns true if permission granted. Throws ExceptionInfo with :type :forbidden if access denied.
Assert user can view entity, throw exception if not. Returns true if permission granted. Throws ExceptionInfo with :type :forbidden if access denied.
cljdoc builds & hosts documentation for Clojure/Script libraries
| Ctrl+k | Jump to recent docs |
| ← | Move to previous article |
| → | Move to next article |
| Ctrl+/ | Jump to the search field |