Interface AuthorizationCheckResultRow

One row of Authorization.Check output.

interface AuthorizationCheckResultRow {
    Allowed: boolean;
    MatchedAuthorizationName: string;
    Name: string;
    Unknown: boolean;
    ViaAncestor: boolean;
}

Properties

Allowed: boolean

True when the user has this authorization or an ancestor grant.

MatchedAuthorizationName: string

The authorization Name that actually matched (leaf or ancestor). Null when not allowed.

Name: string

The name as requested.

Unknown: boolean

True when no MJ: Authorizations row matches this name. Fail-closed: Allowed is then false.

ViaAncestor: boolean

True when Allowed because of an ancestor grant, not a direct role on this row.