PermissionCheckAction

PermissionCheckAction

Purpose Check a global/service-level permission not tied to a specific object instance (e.g., canExportData, canAccessAdminPanel).

When to use it

• afterCheckBasicAuth (right after role/permission bootstrap)
• Before any sensitive branch in the flow

Key fields

Behavior

• With liveCheck, failing users get an authorization error (bypass applies if they hold an absolute role).
• With storedCheck, e.g., write to this.permission_checks['canExportData']=true/false for later logic.

Example

{
  "id": "a210-perm-export",
  "name": "requireExportPermission",
  "permissionName": "canExportData",
  "checkType": "liveCheck"
}