fyi.opensocial.access
Who can access this space, in every space under the group. Grants apply only to this space. Members whose roles grant read may obtain space credentials and write their own records here. The group authority issues space credentials according to this record and nothing else.
Details · record, key literal:self
| Kind | record |
|---|---|
| Record key | literal:self |
| Authority | opensocial.fyi |
| Indexed |
Record
record · key literal:selfProperties
people
arrayA space for chosen people: those who read it and write in it in their own name while they are members, beside the roles granted read, who read it.
maxLength: 100
public
booleanAnyone signed in can read, member or not.
default: false
writableBy
arrayWho may write into the space in their own name, when not every member whose roles grant read: role ids, or 'public' for anyone signed in.
maxLength: 50
Similar lexicons
semantic matchLexicons whose schemas describe something close to this one. Check them before publishing a new one that overlaps.
-
Contents of an access record.
-
fyi.opensocial.permissions
recordGroup-wide grants for each role, in the members space: the OAuth scopes the role holds and the roles its holders may assign. Roles compose by union; there are no deny rules. A writer changes the grants only of roles they may assign, adds no scope their own roles do not hold, and lets no role assign one they may not.
-
fyi.opensocial.members
spaceRoles, who holds them, the authz config, and the space index. Usually gated to members.
-
Space policy for a tree of spaces under one authority. A root omits parent and admits members directly; a space with a parent admits only members of its parent.
-
fyi.opensocial.membership
recordGrants a member their roles, in the members space. Written by the group authority; the record key is the member's DID. Writes are bounded by the writer's assignable roles. Creating one admits one waiting to join and decides their request; deleting one ejects the member.