Zum Hauptinhalt springen

CkMethodAuthorizationDto

Namespace: Meshmakers.Octo.ConstructionKit.Contracts.DataTransferObjects

Authorization of a CkMethodDto (CK v2, AB#5669). The scope octo_api is always required.

public class CkMethodAuthorizationDto

Inheritance Object → CkMethodAuthorizationDto

Properties​

Roles​

Any-of role names (role claim): one listed role suffices. DEFAULT-DENY (AB#6338, platform-owner decision 2026-10-10): an omitted or empty list — and an omitted authorization block — admits administrators only, not every caller with octo_api. Adding a role is looser, removing one (or emptying the list) stricter.

public List<string> Roles { get; set; }

Property Value​

List<String>

AllowSelf​

True when the caller may invoke an instance method on its own entity (caller sub == target rtId).

public bool AllowSelf { get; set; }

Property Value​

Boolean

Scopes​

Additional required scopes, all-of: every listed scope is required in addition to octo_api. Adding a scope is stricter, removing one looser (AB#6338).

public List<string> Scopes { get; set; }

Property Value​

List<String>

Constructors​

CkMethodAuthorizationDto()​

public CkMethodAuthorizationDto()