rbac library

Classes

Access
Declares how a repository method should be guarded.
Capability
A user-facing feature (something an actor interacts with in the UI).
CapabilityEvaluator
Evaluates Capabilitys against a fixed set of granted permissions.
CapabilityResult
Detailed result of evaluating a Capability against a permission set.
FeatureCapability
Default, immutable Capability implementation.
GenerateRBACWrapper
Annotation to trigger RBAC wrapper code generation.
PermissionKey
Contract for permission values used by RBAC checks.
RBACSessionStore
RBACUserContextResolver
UserContext

Functions

assertSelfScope(UserContext ctx, String ownerId) → void
requirePermission(UserContext ctx, PermissionKey permission) → void

Exceptions / Errors

CapabilityCycleError
Thrown when Capability.prerequisites form a cycle (a configuration bug).
ForbiddenException