PermissionRegistrar

Create a new permission registrar.

Configure the permission row partition resolver.

Register before resolving the Permission registrar or Gate.

The column and callback persist in static properties for the worker lifetime and affect every subsequent permission operation.

Determine whether permission row partitioning is configured.

Get the configured permission partition column.

Resolve the current permission partition.

Resolve a permission partition from a persisted record.

Ensure a model belongs to the captured permission partition.

Ensure a Role or Permission model uses the permission storage connection.

Initialize cache and config-backed registrar state.

The values are stored on the singleton registrar and affect every later permission lookup in this worker.

Validate the configured model classes.

Validate that cache serialization retains required model columns.

Validate a configured role model class.

Validate a configured permission model class.

Get the configured cache repository.

Get the memoized cache repository for the current coroutine.

Set the current permissions team id.

Get the current permissions team id.

Ensure a team-scoped mutation has a selected team.

Register the permission check method on the gate.

Flush the permission cache.

Return the backend result when settled immediately, or true once the reset is registered against an open transaction.

Flush the permission cache for an explicit partition.

Invalidate the permission catalog after a model mutation settles.

Rotate the model assignment cache namespace after a model mutation settles.

Invalidate a model's role cache after a mutation settles.

Invalidate an exact model identity's role cache after a mutation settles.

Invalidate a model's permission cache after a mutation settles.

Invalidate an exact model identity's permission cache after a mutation settles.

Remember a model's permissions granted through roles.

Remember a model's hydrated direct permissions.

Remember a model's role assignment ids.

Remember a model's permission assignment ids.

Build the cache key for model assignment caches.

Build an assignment cache key for an explicit identity and context.

Build the runtime cache key segment for coroutine-local model state.

Build a coroutine-local cache key for an explicit identity and context.

Get the current model assignment cache token.

Create a new model assignment cache namespace token.

Forget the cached wildcard permission index.

Get the wildcard permission index for a model.

Get the wildcard index of a model's denied permissions.

Build the coroutine-local wildcard permission index key.

Forget one item from a coroutine-local permission cache.

Forget coroutine-local permission cache items for a partition.

Clear already-loaded permissions collection.

Clear all permission runtime state in the current coroutine.

Clear permission runtime state for an explicit partition.

Mark the context that produced a loaded permission relation.

Determine whether a loaded permission relation matches current context.

Forget loaded permission relation provenance for a model.

Get the permissions based on the passed params.

Get the roles based on the passed params.

Get indexed models for supported exact lookup shapes.

The indexes reflect cached models as they were loaded. Callers save changed models before further lookups, which refreshes the catalog, so lookups stay O(1) without rescanning returned models.

Filter a model collection by attributes.

Determine if an attribute matches a requested value.

Get the permission model class.

Get the connection that owns permission storage.

Run a permission-storage mutation in step with its subject transaction.

Get the current global permission cache key.

Add the permission partition to a cache key.

Resolve an optional explicit partition argument.

Build the runtime key prefix for a partition.

Set the permission model class.

The model class is stored on the singleton registrar and affects every later permission lookup in this worker.

Get the role model class.

Set the role model class.

The model class is stored on the singleton registrar and affects every later role lookup in this worker.

Get the team model class.

Get the pivot class selected by a model's public assignment relation.

Set the team model class.

The model class is stored on the singleton registrar and affects every later team permission lookup in this worker.

Get the unmemoized repository for observing committed shared cache state.

Get the cache store.

Get permissions with their roles.

Get roles for cache.

Determine if any role in the catalog is denied a permission.

Determine if a value is a UUID or ULID.

Flush all static state.