Skip to main content

test_permissions

Function test_permissions 

Source
pub fn test_permissions(
    clp: Option<&ClassLevelPermissions>,
    acl_group: &[String],
    operation: Operation,
) -> bool
Expand description

testPermissions (SchemaController.js:1365-1382).

Default-open. No CLP block, or no entry for this operation, means unrestricted. This is the single most consequential CLP semantic: inverting it fails closed, which looks safe, and locks every existing database out on upgrade.