Jedna bunka RBAC matice — pre danú rolu a zdroj hovorí, či je prístup žiadny, len na čítanie, alebo na čítanie aj zápis; predvolené je odopretie.
Envelope identity and kind-specific facts from the entity's spec.
permission4idThis entity and everything one relation away, grouped by the data store each lives in.
Every column of this entity — type, whether it is required, and which key it is.
| Field | Type | Required | Key | Description |
|---|---|---|---|---|
id | uuid | yes | PK | — |
role_id | uuid | yes | — | — |
resource | text | yes | — | — |
level | text | yes | — | — |
Merged from both ends: an edge the other entity declares appears here too (ADR-0015).
| Related entity | Cardinality | Via | Notes |
|---|---|---|---|
| Rolarole | N — 1many-to-one | — |
Declared spec links and inverses derived from the graph.
Declared here
Derived from the graph
Markdown texts from the entity's docs/ folder.
Architecture notes, runbooks, and onboarding texts belong here — anything a new operator should read.
Add markdown files under data-entities/permission/docs/