site.exosphere.sphere.permissions

Permission overrides for core Sphere actions (member management, module management, permission configuration). Published on the Sphere owner's PDS. Only non-default roles need to be specified — absent keys use the built-in defaults.

Repository @exosphere.site did:plc:tztfs5zp6b4feo4u64adfvmq namespace authority
Details · record, key literal:self
Kindrecord
Record keyliteral:self
Authoritysphere.exosphere.site
Indexed

Record

record · key literal:self

Properties

Minimum role to disable modules.

Reference

Minimum role to enable modules.

Reference

Minimum role to invite members.

Reference

Minimum role to revoke members.

Reference

Minimum role to change member roles.

Reference

Minimum role to update permissions.

Reference

#role

string

Minimum role required to perform a core sphere action.

  • maxLength: 64
  • knownValues: owner | admin

Similar lexicons

semantic match

Lexicons whose schemas describe something close to this one. Check them before publishing a new one that overlaps.

  • Permission overrides for the feature-requests module of an Exosphere Sphere. Published on the Sphere owner's PDS. Only non-default roles need to be specified — absent keys use the module's built-in defaults.

  • Permission overrides for the kanban module of an Exosphere Sphere. Published on the Sphere owner's PDS. Only non-default roles need to be specified — absent keys use the module's built-in defaults.

  • Published by a Sphere owner or admin on their own PDS to confirm a user's membership. References the member's site.exosphere.sphere.member record. The role field indicates the member's permissions within the Sphere.

  • A named bundle of permissions assignable to community members. Lives on the community repo.

  • Group-wide grants for each role, in the members space: the OAuth scopes the role holds and the roles its holders may assign. Roles compose by union; there are no deny rules. A writer changes the grants only of roles they may assign, adds no scope their own roles do not hold, and lets no role assign one they may not.