ay permissions (Alias: perms)
Verwaltet Permission-Requests, Rights und Rollen-Zuweisungen.
Subcommands
ay permissions requests list (Alias: ls)
Listet Permission-Requests.
| Flag | Zweck |
|---|---|
--status <s> |
pending / approved / rejected |
ay permissions requests list
ay perms requests list --status pending
ay permissions requests approve <id>
ay perms requests approve 64a1b2c3
ay permissions requests reject <id> [--reason <text>]
ay perms requests reject 64a1b2c3 --reason "Bitte erst Schulung absolvieren"
ay permissions rights list
Listet alle bekannten Rights des aktiven Customers (via ayounepackages.modules[] und ayounestates).
ay perms rights list
ay perms rights list --module crm
ay permissions rights grant <userId> <right>
Fügt einen Right zu user.customRights[] hinzu.
ay perms rights grant 64a1... crm.consumers.create
ay permissions rights revoke <userId> <right>
ay perms rights revoke 64a1... crm.consumers.create
Hinweis
ay permissions arbeitet on top of der Rights-Architektur (siehe Migration-Konzept Kapitel 1.70):
- Modul-Rights kommen aus dem
ayounepackages-System (additiv). - Custom-Rights werden direkt am User oder Customer gebunden.
- Effective Right = Union aus beidem ∩ Package-Restrictions.
Für Rechte, die im 3-Part-Format (module.entity.action) angegeben werden, wird die Annotation in ayounestates mit stateType: "right" gespiegelt.