permissions


Description

{“what”:“Access control entries linking groups to objects with permission values.”,“why”:“Without it, no authorization decisions can be made for resources.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T04:09:46.331378792+00:00”}

Columns

Column Type Size Nulls Auto Default Children Parents Comments
id int4 10 √ null

{“what”:“Unique integer identifier for each permission record.”,“why”:“Needed to reference and update specific permissions.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T04:09:46.355720736+00:00”}

object varchar 254 null

{“what”:“Name or identifier of the resource being protected.”,“why”:“Determines which resource the permission applies to.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T04:09:46.397444863+00:00”}

group_id int4 10 null
permissions_group.id fk_permissions_group_id C

{“what”:“ID of the user group granted the permission.”,“why”:“Links permission to a group for access checks.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T04:09:46.419504868+00:00”}

perm_value varchar 64 √ null

{“what”:“Permission level such as ‘read’ or ‘write’.”,“why”:“Specifies the allowed action on the object.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T04:09:46.443488508+00:00”}

perm_type varchar 64 √ null

{“what”:“Type like ‘allow’ or ‘deny’ for the rule.”,“why”:“Distinguishes allow from deny rules.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T04:09:46.467892971+00:00”}

collection_id int4 10 √ null
collection.id fk_permissions_ref_collection_id C

{“what”:“ID of a collection if the object is a collection.”,“why”:“Scopes permission to a specific collection.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T04:09:46.496738353+00:00”}

Indexes

Constraint Name Type Sort Column(s)
permissions_pkey Primary key Asc id
idx_permissions_collection_id Performance Asc collection_id
idx_permissions_group_id Performance Asc group_id
idx_permissions_group_id_object Performance Asc/Asc group_id + object
idx_permissions_object Performance Asc object
idx_permissions_perm_type Performance Asc perm_type
idx_permissions_perm_value Performance Asc perm_value
permissions_group_id_object_key Must be unique Asc/Asc group_id + object

Relationships