Lexicon Garden

app.tempomusic.staff.grantStaffRole

Add a DID to the moderators allowlist with the given role. Requires the caller to have the `superAdmin` role. Writes a `moderatorGranted` audit row only when a new row is inserted or a revoked row is reactivated. Idempotent: granting a DID that already holds the same active role returns 200 with `granted: false` and no audit row.

Repository @lexicons.tempomusic.fan did:plc:pxsuqmultto34oks44m2lgxm namespace authority
Details · procedure
Kindprocedure
Authoritystaff.tempomusic.app
Indexed
Compare Edit in builder → Fork →

Procedure

procedure · POST

Input

application/json

did

requiredstring · did

reason

string
  • maxLength: 1000

Output

application/json

auditEntryId

integer

Present only when granted=true.

  • minimum: 1

granted

requiredboolean

True when a new row was inserted or a revoked row was reactivated. False when the DID already held the requested active role (idempotent no-op).

Errors

Forbidden

The caller is not a super-admin.

Similar lexicons

semantic match

Lexicons whose schemas describe something close to this one. Check them before publishing a new one that overlaps.

  • app.tempomusic.staff.revokeStaffRole

    procedure

    Mark a moderator row as revoked. The DID can no longer pass the moderator gate (latency = the moderator-cache TTL, default 30s). Requires the caller to have the `superAdmin` role. A super-admin cannot revoke themselves. Writes a `moderatorRevoked` audit row only when an active row was actually revoked. Idempotent: revoking a DID that is not currently an active moderator returns 200 with `revoked: false` and no audit row.

  • app.didpic.admin.grantRole

    procedure

    Grant a role.

  • pub.chive.admin.assignRole

    procedure

    Assign a role to a user

  • app.didpic.admin.revokeRole

    procedure

    Revoke a role.