Skip to content

AccessEvent

Defined in: src/types/IEvent.ts:55

Emitted for every resolved check — granted and denied. This is the access audit record. ⚠️ context may contain PII; handle accordingly.

timestamp: number

Defined in: src/types/IEvent.ts:48

Epoch milliseconds when the event was emitted.

BaseEvent.timestamp


name: "access"

Defined in: src/types/IEvent.ts:56

The event name (access | change | error).

BaseEvent.name


roles: string[]

Defined in: src/types/IEvent.ts:57


resource: string

Defined in: src/types/IEvent.ts:58


optional category?: string

Defined in: src/types/IEvent.ts:60

The resource’s category, when it is a category/resource.


action: string

Defined in: src/types/IEvent.ts:61


optional possession?: "own" | "any"

Defined in: src/types/IEvent.ts:62


granted: boolean

Defined in: src/types/IEvent.ts:63


attributes: string[]

Defined in: src/types/IEvent.ts:64


optional reason?: DenyReason

Defined in: src/types/IEvent.ts:66

Why it was denied (omitted when granted).


optional context?: UnknownObject

Defined in: src/types/IEvent.ts:68

The merged check context (may contain PII).