ObjectPermissionCheckAction

ObjectPermissionCheckAction

Purpose Verify that the user has a specific permission on a concrete object instance (object-scoped permission).

When to use it

• afterFetchInstance or afterCheckInstance (instance is known)
• Before update/delete operations that require instance-level rights

Key fields

Behavior

• Uses direct object permissions and any inherited/ABAC rules your model defines.
• With liveCheck, failure → 403 (absolute roles bypass).

Example

{
  "id": "a230-object-perm",
  "name": "requireEditPermissionOnProject",
  "permissionName": "project.edit",
  "readObjectIdFrom": "this.project?.id ?? this.projectId",
  "checkType": "liveCheck"
}