Variable narrowScope

Type Declaration

• • (scope: any, subject: any, context: any): string

  • Returns the scope to grant: unchanged, unless it names the debugger permission for somebody who may not hold it, in which case that one value is removed and the removal audited.

    Outside the default realm the permission is always removed.

    Parameters

    • scope: any

      the scope about to be granted

    • subject: any

      the issuance subject, as isAdministrator() takes it

    • context: any

      { clientId, grant }, for the audit row

    Returns string

    the scope string to grant