pub fn validate_permission(
clp: Option<&ClassLevelPermissions>,
class_name: &str,
acl_group: &[String],
operation: Operation,
action: Option<WriteAction>,
detail: ErrorDetail,
) -> Result<(), ParseError>Expand description
Stage one: the gate. validatePermission (SchemaController.js:1385-1459).
Never called for master or maintenance.
Both denials are createSanitizedError call sites upstream (SchemaController.js:1406,
:1412, :1430, :1454), so detail decides whether the client is told which rule refused
it or only that something did.