Skip to content
docsv0.9.0

PermissionContext

What a request is scoped to — never who the actor is. The resolver reads identity from the {@see Actor} and scoping from here; the two are deliberately not mixed. Immutable by construction.

PermissionContext::__construct()

public function __construct(?string $tenantId = null, ?string $resourceType = null, ?string $resourceId = null):

Parameters

Parameters of __construct()
NameTypeDescription
$tenantId?string
$resourceType?string
$resourceId?string

PermissionContext::none()

public static function none(): self

The empty context — no tenant, no resource.