Permission programs: create, get, list
The Permission Verbs create, get, list as MCP do programs, with inputs, result, refusals and an example.
Reference for Permission, one group of Permission programs.
Permission.create
Creates a Permission. Verb page.
do: return await $.Permission.create(input)Emits Permission.created.
Inputs
| Input | Type | Required | Description |
|---|---|---|---|
scope | string | required | Where it applies, such as a Startup or a Tenant. |
limit | Limit | The Limit that bounds it. | |
role | Role | A Role’s Permissions are what its Worker may do: Verbs on Nouns within a scope and a Limit. | |
verb | Verb | Each Permission allows one Verb, within its scope and Limit. |
Returns
| Output | Type | Required | Description |
|---|---|---|---|
permission | Permission | required | The Permission. |
Refuses when
| Check | Error | Fix | Then call |
|---|---|---|---|
| The key is valid, but its scopes do not allow this operation. | forbidden | Use a key whose scopes cover the operation, or ask an owner of the namespace to grant them. | None. |
Example
{
"name": "do",
"arguments": {
"code": "return await $.Permission.create({ scope: 'Example scope' })"
}
}Permission.get
Returns one Permission by id. Verb page.
do: return await $.Permission.get(input)Reads only: it emits no Event.
Inputs
| Input | Type | Required | Description |
|---|---|---|---|
id | string | required | The id of the Permission. |
at | string | A time or Version name: the record as it stood then. Unset: as it stands now. |
Returns
| Output | Type | Required | Description |
|---|---|---|---|
permission | Permission | required | The Permission. |
Refuses when
| Check | Error | Fix | Then call |
|---|---|---|---|
| The key is valid, but its scopes do not allow this operation. | forbidden | Use a key whose scopes cover the operation, or ask an owner of the namespace to grant them. | None. |
Example
{
"name": "do",
"arguments": {
"code": "return await $.Permission.get({ id: 'permission_1IFL54Tlfx' })"
}
}Permission.list
Returns Permissions, newest first, one page at a time. Verb page.
do: return await $.Permission.list(input)Reads only: it emits no Event.
Inputs
| Input | Type | Required | Description |
|---|---|---|---|
limit | integer | At most this many records, up to 100. The default is 20. | |
after | string | The cursor from the previous page. | |
where | string | A filter over the properties, such as paidAt = null and total.amount > 500. | |
sort | string | Properties to sort by, comma-separated; a leading minus sorts descending. | |
total | boolean | True adds the match count as meta.total, exact up to 10,000 matches and estimated above. | |
facets | string | Properties to count by value, comma-separated, returned as meta.facets. | |
fields | string | Properties to return on each record, comma-separated; $id and $type always return. | |
include | string | Related records to embed in place of their URLs, comma-separated. | |
depth | integer | How many levels of related records to embed. The default is 1. | |
q | string | Words to match across the text properties, ranked by relevance. | |
match | string | Ranks the search by words, or meaning; words is the default. |
Returns
| Output | Type | Required | Description |
|---|---|---|---|
permissions | list of Permission | required | One page of Permissions. |
Refuses when
| Check | Error | Fix | Then call |
|---|---|---|---|
| The key is valid, but its scopes do not allow this operation. | forbidden | Use a key whose scopes cover the operation, or ask an owner of the namespace to grant them. | None. |
Example
{
"name": "do",
"arguments": {
"code": "return await $.Permission.list({ limit: 20 })"
}
}