Represents an atomic permission that can be granted to roles. More...
#include <permission.hpp>
Collaboration diagram for permission:
Public Attributes | |
| utility::uuid::tenant_id | tenant_id = utility::uuid::tenant_id::system() |
| Tenant identifier for multi-tenancy isolation. | |
| boost::uuids::uuid | id |
| Unique identifier for the permission. | |
| std::string | code |
| Permission code following the format "component::resource:action". | |
| std::string | description |
| Human-readable description of what this permission allows. | |
Detailed Description
Represents an atomic permission that can be granted to roles.
Permissions follow a hierarchical naming convention: "component::resource:action" (e.g., "iam::accounts:create").
Wildcard permissions:
- "*" grants all permissions (superuser)
- "component::*" grants all permissions within a component
- Note
- This type does not include change tracking fields (change_reason_code, change_commentary) because permissions are system-defined constants populated from bootstrap data. They are not user-editable and do not require audit trails. Roles, which reference permissions, are user-manageable and do have change tracking.
Member Data Documentation
◆ code
| std::string code |
Permission code following the format "component::resource:action".
Examples: "iam::accounts:create", "refdata::currencies:read". Use "*" for wildcard (all permissions).
