ReadonlyAllowedReadonlyLevelHighest level granted, or 'None' when no grant applies.
ReadonlyReasonHuman-readable explanation suitable for audit logs and error messages.
ReadonlySourceWhere the decision came from.
Renders the effective permission as a SQL predicate fragment that can be ANDed into a provider's WHERE clause. Returns '1=1' when the permission allows unrestricted access for this scope, '1=0' when it rejects entirely. Providers that translate to non-SQL DSLs should inspect Allowed/Level instead — the predicate is for SQL Server-backed providers and is intentionally trivial today; richer per-scope filters live in the SearchScope.ScopeConfig template.
True when the principal can at least read the scope's metadata.