Variable: PERMISSIONS

const PERMISSIONS: object

Defined in: packages/contracts/src/permissions/table.ts:178

The permission table. It has exactly one row per registry key, so a subject with no row, or a row with no subject, does not compile (and verifyEstate says so again at generation time). The same holds for a standing grant, whose row names its holder and reaches no subject, and for a command to an agent, whose row names the agent's principal and its senders.

Type Declaration

agent.shared.admin.did.create.v1

readonly agent.shared.admin.did.create.v1: object

agent.shared.admin.did.create.v1.handledBy

readonly handledBy: "agent-shared" = 'agent-shared'

agent.shared.admin.did.create.v1.sentBy

readonly sentBy: readonly ["issuance"]

agent.shared.admin.did.update.v1

readonly agent.shared.admin.did.update.v1: object

agent.shared.admin.did.update.v1.handledBy

readonly handledBy: "agent-shared" = 'agent-shared'

agent.shared.admin.did.update.v1.sentBy

readonly sentBy: readonly ["issuance"]

agent.shared.admin.tenant.ensure.v1

readonly agent.shared.admin.tenant.ensure.v1: object

agent.shared.admin.tenant.ensure.v1.handledBy

readonly handledBy: "agent-shared" = 'agent-shared'

agent.shared.admin.tenant.ensure.v1.sentBy

readonly sentBy: readonly ["provisioning"]

event.*.*.audit.recorded.v1

readonly event.*.*.audit.recorded.v1: object

event.*.*.audit.recorded.v1.publishedBy

readonly publishedBy: readonly ["identity", "governance", "trust", "issuance", "provisioning"]

event.*.governance.accreditation.admitted.v1

readonly event.*.governance.accreditation.admitted.v1: object

event.*.governance.accreditation.admitted.v1.publishedBy

readonly publishedBy: readonly ["governance"]

event.*.governance.accreditation.publication-approved.v1

readonly event.*.governance.accreditation.publication-approved.v1: object

event.*.governance.accreditation.publication-approved.v1.publishedBy

readonly publishedBy: readonly ["governance"]

event.*.identity.grant.revoked.v1

readonly event.*.identity.grant.revoked.v1: object

event.*.identity.grant.revoked.v1.publishedBy

readonly publishedBy: readonly ["identity"]

event.*.identity.grant.revoked.v1.subscribedBy

readonly subscribedBy: readonly ["gateway", "gateway-admin"]

event.*.issuance.identifier.published.v1

readonly event.*.issuance.identifier.published.v1: object

event.*.issuance.identifier.published.v1.publishedBy

readonly publishedBy: readonly ["issuance"]

event.*.issuance.identifier.requested.v1

readonly event.*.issuance.identifier.requested.v1: object

event.*.issuance.identifier.requested.v1.publishedBy

readonly publishedBy: readonly ["issuance"]

event.*.provisioning.placement.changed.v1

readonly event.*.provisioning.placement.changed.v1: object

event.*.provisioning.placement.changed.v1.publishedBy

readonly publishedBy: readonly ["provisioning"]

event.*.trust.entity-statement.published.v1

readonly event.*.trust.entity-statement.published.v1: object

event.*.trust.entity-statement.published.v1.publishedBy

readonly publishedBy: readonly ["trust"]

event.platform.bootstrap.audit.recorded.v1

readonly event.platform.bootstrap.audit.recorded.v1: object

event.platform.bootstrap.audit.recorded.v1.publishedBy

readonly publishedBy: readonly ["bootstrap"]

event.platform.gateway-admin.audit.recorded.v1

readonly event.platform.gateway-admin.audit.recorded.v1: object

event.platform.gateway-admin.audit.recorded.v1.publishedBy

readonly publishedBy: readonly ["gateway-admin"]

event.platform.gateway.audit.recorded.v1

readonly event.platform.gateway.audit.recorded.v1: object

event.platform.gateway.audit.recorded.v1.publishedBy

readonly publishedBy: readonly ["gateway"]

request.*.governance.accreditation.admit.v1

readonly request.*.governance.accreditation.admit.v1: object

request.*.governance.accreditation.admit.v1.calledBy

readonly calledBy: readonly ["gateway-admin"]

request.*.governance.accreditation.admit.v1.servedBy

readonly servedBy: "governance" = 'governance'

request.*.governance.accreditation.apply.v1

readonly request.*.governance.accreditation.apply.v1: object

request.*.governance.accreditation.apply.v1.calledBy

readonly calledBy: readonly ["gateway-admin"]

request.*.governance.accreditation.apply.v1.servedBy

readonly servedBy: "governance" = 'governance'

request.*.governance.accreditation.get.v1

readonly request.*.governance.accreditation.get.v1: object

request.*.governance.accreditation.get.v1.calledBy

readonly calledBy: readonly ["gateway-admin"]

request.*.governance.accreditation.get.v1.servedBy

readonly servedBy: "governance" = 'governance'

request.*.governance.accreditation.list.v1

readonly request.*.governance.accreditation.list.v1: object

request.*.governance.accreditation.list.v1.calledBy

readonly calledBy: readonly ["gateway-admin"]

request.*.governance.accreditation.list.v1.servedBy

readonly servedBy: "governance" = 'governance'

request.*.governance.accreditation.publish.v1

readonly request.*.governance.accreditation.publish.v1: object

request.*.governance.accreditation.publish.v1.calledBy

readonly calledBy: readonly ["gateway-admin"]

request.*.governance.accreditation.publish.v1.servedBy

readonly servedBy: "governance" = 'governance'

request.*.identity.grant.create.v1

readonly request.*.identity.grant.create.v1: object

request.*.identity.grant.create.v1.calledBy

readonly calledBy: readonly ["gateway"]

request.*.identity.grant.create.v1.servedBy

readonly servedBy: "identity" = 'identity'

request.*.identity.grant.list.v1

readonly request.*.identity.grant.list.v1: object

request.*.identity.grant.list.v1.calledBy

readonly calledBy: readonly ["gateway"]

request.*.identity.grant.list.v1.servedBy

readonly servedBy: "identity" = 'identity'

request.*.identity.grant.revoke.v1

readonly request.*.identity.grant.revoke.v1: object

request.*.identity.grant.revoke.v1.calledBy

readonly calledBy: readonly ["gateway"]

request.*.identity.grant.revoke.v1.servedBy

readonly servedBy: "identity" = 'identity'

request.*.identity.person.create.v1

readonly request.*.identity.person.create.v1: object

request.*.identity.person.create.v1.calledBy

readonly calledBy: readonly ["gateway"]

request.*.identity.person.create.v1.servedBy

readonly servedBy: "identity" = 'identity'

request.*.identity.person.get.v1

readonly request.*.identity.person.get.v1: object

request.*.identity.person.get.v1.calledBy

readonly calledBy: readonly ["gateway"]

request.*.identity.person.get.v1.servedBy

readonly servedBy: "identity" = 'identity'

request.*.identity.person.invite.v1

readonly request.*.identity.person.invite.v1: object

request.*.identity.person.invite.v1.calledBy

readonly calledBy: readonly ["gateway"]

request.*.identity.person.invite.v1.servedBy

readonly servedBy: "identity" = 'identity'

request.*.identity.subject.create.v1

readonly request.*.identity.subject.create.v1: object

request.*.identity.subject.create.v1.calledBy

readonly calledBy: readonly ["gateway"]

request.*.identity.subject.create.v1.servedBy

readonly servedBy: "identity" = 'identity'

request.*.identity.subject.get.v1

readonly request.*.identity.subject.get.v1: object

request.*.identity.subject.get.v1.calledBy

readonly calledBy: readonly ["gateway", "governance", "issuance"]

request.*.identity.subject.get.v1.servedBy

readonly servedBy: "identity" = 'identity'

request.*.issuance.identifier.create.v1

readonly request.*.issuance.identifier.create.v1: object

request.*.issuance.identifier.create.v1.calledBy

readonly calledBy: readonly ["gateway"]

request.*.issuance.identifier.create.v1.servedBy

readonly servedBy: "issuance" = 'issuance'

request.*.issuance.identifier.get.v1

readonly request.*.issuance.identifier.get.v1: object

request.*.issuance.identifier.get.v1.calledBy

readonly calledBy: readonly ["gateway"]

request.*.issuance.identifier.get.v1.servedBy

readonly servedBy: "issuance" = 'issuance'

request.*.issuance.identifier.list.v1

readonly request.*.issuance.identifier.list.v1: object

request.*.issuance.identifier.list.v1.calledBy

readonly calledBy: readonly ["gateway"]

request.*.issuance.identifier.list.v1.servedBy

readonly servedBy: "issuance" = 'issuance'

request.*.issuance.identifier.preview.v1

readonly request.*.issuance.identifier.preview.v1: object

request.*.issuance.identifier.preview.v1.calledBy

readonly calledBy: readonly ["gateway"]

request.*.issuance.identifier.preview.v1.servedBy

readonly servedBy: "issuance" = 'issuance'

request.*.issuance.identifier.publish.v1

readonly request.*.issuance.identifier.publish.v1: object

request.*.issuance.identifier.publish.v1.calledBy

readonly calledBy: readonly ["gateway"]

request.*.issuance.identifier.publish.v1.servedBy

readonly servedBy: "issuance" = 'issuance'

request.*.issuance.identifier.update.v1

readonly request.*.issuance.identifier.update.v1: object

request.*.issuance.identifier.update.v1.calledBy

readonly calledBy: readonly ["gateway"]

request.*.issuance.identifier.update.v1.servedBy

readonly servedBy: "issuance" = 'issuance'

request.*.trust.entity-statement.list.v1

readonly request.*.trust.entity-statement.list.v1: object

request.*.trust.entity-statement.list.v1.calledBy

readonly calledBy: readonly ["gateway-admin", "governance"]

request.*.trust.entity-statement.list.v1.servedBy

readonly servedBy: "trust" = 'trust'

request.*.trust.entity-statement.preview.v1

readonly request.*.trust.entity-statement.preview.v1: object

request.*.trust.entity-statement.preview.v1.calledBy

readonly calledBy: readonly ["gateway-admin"]

request.*.trust.entity-statement.preview.v1.servedBy

readonly servedBy: "trust" = 'trust'

request.platform.governance.anchor.converge.v1

readonly request.platform.governance.anchor.converge.v1: object

request.platform.governance.anchor.converge.v1.calledBy

readonly calledBy: readonly ["bootstrap"]

request.platform.governance.anchor.converge.v1.servedBy

readonly servedBy: "governance" = 'governance'

request.platform.identity.bootstrap.apply.v1

readonly request.platform.identity.bootstrap.apply.v1: object

request.platform.identity.bootstrap.apply.v1.calledBy

readonly calledBy: readonly ["bootstrap"]

request.platform.identity.bootstrap.apply.v1.servedBy

readonly servedBy: "identity" = 'identity'

request.platform.identity.me.get.v1

readonly request.platform.identity.me.get.v1: object

request.platform.identity.me.get.v1.calledBy

readonly calledBy: readonly ["gateway"]

request.platform.identity.me.get.v1.servedBy

readonly servedBy: "identity" = 'identity'

request.platform.identity.principal.resolve.v1

readonly request.platform.identity.principal.resolve.v1: object

request.platform.identity.principal.resolve.v1.calledBy

readonly calledBy: readonly ["gateway", "gateway-admin"]

request.platform.identity.principal.resolve.v1.servedBy

readonly servedBy: "identity" = 'identity'

request.platform.identity.root-sign-in.get.v1

readonly request.platform.identity.root-sign-in.get.v1: object

request.platform.identity.root-sign-in.get.v1.calledBy

readonly calledBy: readonly ["bootstrap"]

request.platform.identity.root-sign-in.get.v1.servedBy

readonly servedBy: "identity" = 'identity'

request.platform.issuance.identifier.converge.v1

readonly request.platform.issuance.identifier.converge.v1: object

request.platform.issuance.identifier.converge.v1.calledBy

readonly calledBy: readonly ["bootstrap"]

request.platform.issuance.identifier.converge.v1.servedBy

readonly servedBy: "issuance" = 'issuance'

request.platform.issuance.identifier.resolve.v1

readonly request.platform.issuance.identifier.resolve.v1: object

request.platform.issuance.identifier.resolve.v1.calledBy

readonly calledBy: readonly ["bootstrap"]

request.platform.issuance.identifier.resolve.v1.servedBy

readonly servedBy: "issuance" = 'issuance'

request.platform.issuance.registry.probe.v1

readonly request.platform.issuance.registry.probe.v1: object

request.platform.issuance.registry.probe.v1.calledBy

readonly calledBy: readonly ["bootstrap"]

request.platform.issuance.registry.probe.v1.servedBy

readonly servedBy: "issuance" = 'issuance'

request.platform.provisioning.agent.converge.v1

readonly request.platform.provisioning.agent.converge.v1: object

request.platform.provisioning.agent.converge.v1.calledBy

readonly calledBy: readonly ["bootstrap"]

request.platform.provisioning.agent.converge.v1.servedBy

readonly servedBy: "provisioning" = 'provisioning'

request.platform.trust.key-store.probe.v1

readonly request.platform.trust.key-store.probe.v1: object

request.platform.trust.key-store.probe.v1.calledBy

readonly calledBy: readonly ["bootstrap"]

request.platform.trust.key-store.probe.v1.servedBy

readonly servedBy: "trust" = 'trust'

standing.identity.subject-key.rewrap.v1

readonly standing.identity.subject-key.rewrap.v1: object

standing.identity.subject-key.rewrap.v1.heldBy

readonly heldBy: readonly ["identity"]

standing.trust.entity-statement.renew.v1

readonly standing.trust.entity-statement.renew.v1: object

standing.trust.entity-statement.renew.v1.heldBy

readonly heldBy: readonly ["trust"]