AuthorizationPolicy

@forge/monorepo

---

@forge/monorepo / backend/src / AuthorizationPolicy

Interface: AuthorizationPolicy

Defined in: backend/src/authorization/index.ts:36

Methods

can()

can(context, action, resource): Promise<Decision>

Defined in: backend/src/authorization/index.ts:38

A single point decision; may carry obligations (e.g. requires-approval, redact).

Parameters

context

ExecutionContext

action

string

resource

ResourceRef

Returns

Promise<Decision>

---

filterTools()

filterTools(context, tools): Promise<readonly ToolDescriptor[]>

Defined in: backend/src/authorization/index.ts:40

The permission-filtered catalog, computed before discovery.

Parameters

context

ExecutionContext

tools

readonly ToolDescriptor[]

Returns

Promise<readonly ToolDescriptor[]>

---

scope()

scope(context, resourceType): Promise<PermissionScope>

Defined in: backend/src/authorization/index.ts:45

The scope filter for a resource type, applied before any list/search.

Parameters

context

ExecutionContext

resourceType

string

Returns

Promise<PermissionScope>