Skip to content

Mandate.revoke

POST /{namespace}/mandates/{mandate}/revoke

Revoke ends a Mandate at once, so new Actions under it are refused and running ones finish.

Mode
do
Event
Mandate.revoked

Inputs

InputTypeRequiredDescription
mandateMandaterequiredThe Mandate to end.

Outputs

OutputTypeRequiredDescription
mandateMandaterequiredThe revoked Mandate.

Effects

  • Emits Mandate.revoked.
  • Performed by the Security Engineer.
  • Runs for every Mandate a person granted when their Customer’s directory removes them, in one Action with the key and Integration revokes.

Refuses when

CheckErrorFixThen call
The key is valid, but its scopes do not allow this operation.forbiddenUse a key whose scopes cover the operation, or ask an owner of the namespace to grant them.Mandate.revoke
The record is not in a state that allows this Verb, so the call is refused.refusedRead the record, run the Verb that moves it to an allowed state, then retry.Mandate.revoke

When it waits

GateDefault
Decision classLow: two-way, nothing at stake
Delay windowNone: it runs once review passes.
LimitThe call Limit of the Permission it runs under.
Over the LimitIt waits pending for an Approval from the Founder. Approved, it runs; refused, it ends refused with limit-exceeded; unanswered by its deadline, it ends canceled.