Skip to content
GitmoapAPIBeta
Schema

AccessAuditDetail

The access changes one request made — carried on its audit record, because the operation and route alone say that access changed and not what it changed from and to.

Shape

  • changesarray of AccessAuditChange
    • The AccessAuditChange schema
    • grant_idGrantId (string · uuid)
    • scopeScopeRef
    • sensitivebooleanWhether either role carries a sensitive or reserved permission.
    • subjectSubjectRef
    • afterRoleRef or nulloptionalThe role after the change. Absent for a revoked grant.
    • beforeRoleRef or nulloptionalThe role before the change. Absent for a new grant.
  • inheritanceInheritanceAuditChange or nulloptionalA scope's inheritance switched.
  • limitLimitAuditChange or nulloptionalA limit set or removed.
  • roleRoleAuditChange or nulloptionalA custom role's permissions changing — which changes access wherever the role is granted, without any grant changing.
    • The RoleAuditChange schema
    • grants_affectedinteger · int64
    • limits_affectedinteger · int64
    • permissions_addedarray of string
    • permissions_removedarray of string
    • role_idRoleId (string · uuid)

Example

Synthesized example
{
"changes": [
{
"grant_id": "43a9fdae-6087-44e3-b4ab-6857c4ec6b10",
"scope": {
"group": "4c1d8e2f-6a3b-4f90-b7c5-1e2d3c4b5a69"
},
"sensitive": false,
"subject": {
"principal": "344fd1bf-ddc7-4895-8154-bad0644b76a7"
}
},
{
"grant_id": "edaf845f-63c1-4ec3-86a8-aa715f397be4",
"scope": {
"group": "4c1d8e2f-6a3b-4f90-b7c5-1e2d3c4b5a69"
},
"sensitive": false,
"subject": {
"principal": "d8729b85-fda6-4bc9-892c-ebea41661832"
}
}
],
"inheritance": {
"inherits_access": false,
"scope": {
"group": "4c1d8e2f-6a3b-4f90-b7c5-1e2d3c4b5a69"
}
},
"limit": {
"ceiling": {
"builtin": "guest"
},
"limit_id": "eaa53f09-accb-4b25-a3e2-31ff5999d3c6",
"scope": {
"group": "4c1d8e2f-6a3b-4f90-b7c5-1e2d3c4b5a69"
},
"set": false,
"subject": {
"principal": "7b951554-04d9-4030-8e2a-80fd0b1ca09e"
}
},
"role": {
"grants_affected": 65,
"limits_affected": 76,
"permissions_added": [
"permissions-added-c594"
],
"permissions_removed": [
"permissions-removed-b6c6"
],
"role_id": "96e0310c-b89a-42d2-aff8-81ea74aec77e"
}
}

Graph

Used inside
Contains

Used by

Sent by 0 operations

No operation takes it as a request body.

Returned by 0 operations

No operation returns it directly.