Lexicon Garden

health.hats.revokeAccess

End every grant the caller has given one grantee. The space host asks the coordinator before issuing each space credential, so the grantee gets no new credential from then on; a credential already issued lasts until it expires. Authenticated as the patient (service auth).

Repository @hats.health did:plc:uvvhtareovj2oaregs7vsibv not from the namespace authority
Details · procedure
Kindprocedure
Authorityhats.health
Indexed
Compare Edit in builder → Fork →

Procedure

procedure · POST

Input

application/json

grantee

requiredstring · did

Whose access to end: a clinician's or institution's DID.

Output

application/json

revoked

requiredinteger

How many space grants ended.

Similar lexicons

semantic match

Lexicons whose schemas describe something close to this one. Check them before publishing a new one that overlaps.

  • health.hats.institution.leaveRole

    procedure

    A clinician leaves an institution: their role there ends now. It's their own act, honored at once, since giving up a role only removes access; an administrator revokes the role credential after. The institution's node writes the ended PractitionerRole and a Provenance naming the clinician. Authenticated as the clinician (service auth).

  • health.hats.institution.endRole

    procedure

    An administrator ends someone's role at their institution, when the person didn't choose to go, or records a leaving by revoking the credential. The node writes the ended PractitionerRole, pointing its forward where the administrator says, and a Provenance naming the administrator. Authenticated as the administrator (service auth), who must hold institution.administrator there.

  • pub.chive.governance.revokeRole

    procedure

    Revoke a user's governance role. Only accessible to administrators. Also revokes any active delegation.

  • health.hats.listGrants

    query not from the namespace authority

    Grants the caller gave, as a patient, and grants the caller holds, as a grantee: one entry per request, newest first. Authenticated by service auth, so each caller sees only their own.

  • zone.stratos.admin.removeAdmin

    procedure

    Revoke admin access from a DID. Config-provided admins cannot be revoked here, and an admin cannot revoke their own access.