Skip to content

AccessEvent

Defined in: src/types/IEvent.ts:43

Emitted for every resolved check — granted and denied. This is the access audit record. ⚠️ context may contain PII; handle accordingly.

timestamp: number

Defined in: src/types/IEvent.ts:36

Epoch milliseconds when the event was emitted.

BaseEvent.timestamp


name: "access"

Defined in: src/types/IEvent.ts:44

The event name (access | change | error).

BaseEvent.name


roles: string[]

Defined in: src/types/IEvent.ts:45


resource: string

Defined in: src/types/IEvent.ts:46


optional category?: string

Defined in: src/types/IEvent.ts:48

The resource’s category, when it is a category/resource.


action: string

Defined in: src/types/IEvent.ts:49


optional possession?: "own" | "any"

Defined in: src/types/IEvent.ts:50


granted: boolean

Defined in: src/types/IEvent.ts:51


attributes: string[]

Defined in: src/types/IEvent.ts:52


optional reason?: AccessReason

Defined in: src/types/IEvent.ts:54

Why it was denied (omitted when granted).


optional context?: UnknownObject

Defined in: src/types/IEvent.ts:56

The merged check context (may contain PII).