How do I run the permissions commands from the shell?
Table of Contents
This file documents the permissions resource at the shell, one section per command. Every command is a subcommand of permissions, and every section exports its own script into projects/ores.shell/scripts/library/. Loading a script runs that one command, so a failure names the command it came from.
1. Commands
1.1. list
Reads one page of the collection. Nothing addresses it but the caller's tenant, so it is the read that shows what exists.
The command is shaped like this:
permissions list [--offset <n>] [--limit <n>] [--order <field>] [--desc]
It is addressed at iam.v1.permissions.list.
permissions list --limit 1
1.2. get
Reads the one row its key addresses. A key states every identifying column, so a partial key is refused rather than answered with an arbitrary row.
The command is shaped like this:
permissions get <code>
It is addressed at iam.v1.permissions.get.
permissions get __none__
1.3. get-many
Reads several rows in one request, one key group per row.
The command is shaped like this:
permissions get-many <code>
It is addressed at iam.v1.permissions.get_many.
permissions get-many __none__
1.4. add
Writes a row. The change states that the row must not exist, so a create that collides with an existing row is refused rather than replacing it. The change carries a reason and a commentary, which the server records on it so the row's history says why it moved.
The command is shaped like this:
permissions add <code> <description> <reason> <commentary>
It is addressed at iam.v1.permissions.put.
permissions add __none__ __none__ system.new_record generated_script
1.5. set
Writes a row. The change states no precondition, so it replaces whatever row the key already addresses. The change carries a reason and a commentary, which the server records on it so the row's history says why it moved. Passing –version makes the write conditional on the version the caller last read.
The command is shaped like this:
permissions set <id> <code> <description> <reason> <commentary> [--version <n>]
It is addressed at iam.v1.permissions.put.
permissions set 00000000-0000-0000-0000-000000000000 __none__ __none__ system.new_record generated_script
1.6. put-many
Writes several rows in one request. The count states how many field groups follow. The change carries a reason and a commentary, which the server records on it so the row's history says why it moved.
The command is shaped like this:
permissions put-many --count <n> <id> <code> <description> <reason> <commentary>
It is addressed at iam.v1.permissions.put_many.
permissions put-many --count 1 00000000-0000-0000-0000-000000000000 __none__ __none__ system.new_record generated_script
1.7. delete
Removes a row. The change carries a reason and a commentary, which the server records on it so the row's history says why it moved. Passing –version makes the write conditional on the version the caller last read.
The command is shaped like this:
permissions delete <code> <reason> <commentary> [--version <n>]
It is addressed at iam.v1.permissions.delete.
permissions delete __none__ system.new_record generated_script
1.8. delete-many
Removes several rows in one request. The change carries a reason and a commentary, which the server records on it so the row's history says why it moved.
The command is shaped like this:
permissions delete-many <code> <reason> <commentary>
It is addressed at iam.v1.permissions.delete_many.
permissions delete-many __none__ system.new_record generated_script