Skip to main content

canActInIAMOperation

@webda/iam


Function: canActInIAMOperation()

canActInIAMOperation(context?): string | true

Defined in: packages/iam/src/active.ts:37

Static canAct of the IAM models: their operations are decided by the IAMService authorizer, so an action is allowed only inside an operation that authorizer allowed

Paths that consult the model permission without dispatching an operation (e.g. GraphQL CRUD) carry no IAM decision and are refused, whatever the caller.

Parameters​

context?​

IAMExtensionContext

the caller context

Returns​

string | true

true when IAM is running and allowed the context's current operation, otherwise the refusal reason