Lexicon Garden

fyi.opensocial.access

Who may read this space. Present in every space under the group. The group authority issues space credentials according to this record and nothing else.

Repository @lexicons.opensocial.fyi did:plc:2gqnilpksz2e7faj3bwvo6qc namespace authority
Details · record, key literal:self
Kindrecord
Record keyliteral:self
Authorityopensocial.fyi
Indexed

Showing version bafyreiheqjkgpnde6n2eqo5fuyx2jg73bplo5tgeymz6bf2ekftlpspw4m. Show the latest

Compare Edit in builder → Fork →

Record

record · key literal:self

Properties

createdAt

requiredstring · datetime

credentialScopes

array

Which OAuth scopes for the group DID each role may request in this space. A role that may write a kind of record as the group here may also publish that kind, as the group, in its public repo; '*' is any kind, in both.

  • maxLength: 50
itemsref
Reference

readableBy

requiredarray

Role ids that may read the space, or the literal string 'public' meaning any authenticated requester.

  • maxLength: 50
itemsstring
  • maxLength: 64

writableBy

array

Who may write into the space in their own name: role ids, or 'public' for anyone signed in. Absent is any member.

  • maxLength: 50
itemsstring
  • maxLength: 64

#roleScopes

object

Properties

role

requiredstring

A role id: the record key of a fyi.opensocial.role record.

  • maxLength: 64

scopes

requiredarray

Collections this role may write in the space as the group: an NSID, or * for any. Every write, unless the grant names some: xyz.task?action=create lets the role add tasks but not change or delete them.

  • maxLength: 100
itemsstring
  • maxLength: 400

Similar lexicons

semantic match

Lexicons whose schemas describe something close to this one. Check them before publishing a new one that overlaps.

  • fyi.opensocial.defs

    Contents of an access record.

  • fyi.opensocial.permissions

    record

    Group-wide grants for each role, in the members space: the OAuth scopes the role holds and the roles its holders may assign. Roles compose by union; there are no deny rules. A writer changes the grants only of roles they may assign, adds no scope their own roles do not hold, and lets no role assign one they may not.

  • fyi.opensocial.members

    space

    Roles, who holds them, the authz config, and the space index. Usually gated to members.

  • us.off-the-clock.subspace.policy

    object not from the namespace authority

    Space policy for a tree of spaces under one authority. A root omits parent and admits members directly; a space with a parent admits only members of its parent.

  • fyi.opensocial.membership

    record

    Grants a member their roles, in the members space. Written by the group authority; the record key is the member's DID. Writes are bounded by the writer's assignable roles. Creating one admits one waiting to join and decides their request; deleting one ejects the member.