OSS-first docs

These docs teach the open system first: contracts, generated surfaces, runtimes, governance, and incremental adoption. Studio shows up as the operating layer on top, not as the source of truth.

AI index

identity.rbac.check

Check if a user has a specific permission.

  • Type: operation (query)
  • Version: 1.0.0
  • Stability: stable
  • Owners: @platform.identity-rbac
  • Tags: identity, rbac, check, permission
  • File: packages/libs/identity-rbac/src/contracts/rbac.ts
    • field.key.label
    identity.rbac.check
    field.version.label
    1.0.0
    field.type.label
    operation (query)
    field.title.label
    identity.rbac.check
    field.description.label

    Check if a user has a specific permission.

  • Type: operation (query)
  • Version: 1.0.0
  • Stability: stable
  • Owners: @platform.identity-rbac
  • Tags: identity, rbac, check, permission
  • File: packages/libs/identity-rbac/src/contracts/rbac.ts
    • field.tags.label
    identity,rbac,check,permission
    field.owners.label
    @platform.identity-rbac
    field.stability.label
    stable

    Check if a user has a specific permission.

    Goal

    Authorization check before sensitive operations.

    Context

    Called by other services to verify permissions.

    Source Definition

    import { defineCommand, defineQuery } from '@lssm-tech/lib.contracts-spec';
import { ScalarTypeEnum, SchemaModel } from '@lssm-tech/lib.schema';
import { SuccessResultModel } from './user';

export const CheckPermissionContract = defineQuery({
	meta: {
		key: 'identity.rbac.check',
		version: '1.0.0',
		stability: 'stable',
		owners: ['@platform.identity-rbac'],
		tags: ['identity', 'rbac', 'check', 'permission'],
		description: 'Check if a user has a specific permission.',
		goal: 'Authorization check before sensitive operations.',
		context: 'Called by other services to verify permissions.',
	},
	io: {
		input: CheckPermissionInputModel,
		output: PermissionCheckResultModel,
	},
	policy: {
		auth: 'user',
	},
});