CoolCMS API

PermissionDecision
in package

Application

Result of {@see PermissionResolver::decide()}.

ALLOW: an unconditional grant, at least one role of the caller has allowed=1 and conditional=0. It wins even when a conditional grant exists as well.
ALLOW_IF_OWNER: a conditional grant (role with conditional=1, typically owner). It allows nothing by itself; the caller must still pass verifyOwnership(), and without an implemented check it must behave as DENY.
DENY: no role of the caller has allowed=1 for the key, or the key does not exist in the database (a missing row is a denial, there is no inheritance).