Skip to main content

validate_permission

Function validate_permission 

Source
pub fn validate_permission(
    clp: Option<&ClassLevelPermissions>,
    class_name: &str,
    acl_group: &[String],
    operation: Operation,
    action: Option<WriteAction>,
    detail: ErrorDetail,
) -> Result<(), ParseError>
Expand description

Stage one: the gate. validatePermission (SchemaController.js:1385-1459).

Never called for master or maintenance.

Both denials are createSanitizedError call sites upstream (SchemaController.js:1406, :1412, :1430, :1454), so detail decides whether the client is told which rule refused it or only that something did.