Function: standingGrantHolders()

standingGrantHolders(key): readonly string[]

Defined in: packages/contracts/src/permissions/table.ts:370

Who the permission table says holds a standing grant.

verifyEstate checks the holder when the broker file is generated, but a standing grant reaches no subject, so the broker never refuses anybody on its account. This is the same answer for a running process: a module's wiring asks it before it mints a scope for a standing key, and does not start if its own name is missing. It reads the table and holds no list of its own, so the two checks cannot come to disagree.

Parameters

key

"standing.trust.entity-statement.renew.v1" | "standing.identity.subject-key.rewrap.v1"

A standing grant's registry key.

Returns

readonly string[]

The holders named in the key's row. Empty when the row is not a heldBy row or is not there at all, which only a cast can bring about, so that a caller that got here by one is refused and not let through.