@3sixty/api-tenant-processor 0.20.0-next.0 → 0.20.0-next.1

package/dist/es/tenantOverrideProcessor.js

@@ -1,119 +0,0 @@
-// Copyright 2026 IOTA Stiftung.
-// SPDX-License-Identifier: Apache-2.0.
-import { ForbiddenError, HttpContextIdKeys, HttpErrorHelper, ScopeHelper } from "@3sixty/api-models";
-import { ContextIdKeys } from "@3sixty/context";
-import { BaseError, ComponentFactory, GuardError, Is, NotFoundError } from "@3sixty/core";
-/**
- * Processes the overrideTenant query parameter for routes that allow tenant override.
- * Requires the caller to hold the escalated privilege scope. Runs after AuthHeaderProcessor so
- * authentication is always resolved in the caller's own partition first.
- */
-export class TenantOverrideProcessor {
-    /**
-     * The query parameter name used to supply the override tenant ID.
-     */
-    static OVERRIDE_TENANT_PARAM = "override-tenant";
-    /**
-     * The scope string required to perform a tenant override.
-     */
-    static DEFAULT_ESCALATED_PRIVILEGE_SCOPE = "global-admin";
-    /**
-     * Runtime name for the class.
-     */
-    static CLASS_NAME = "TenantOverrideProcessor";
-    /**
-     * The component used to resolve tenants, which also provides the lookup caching.
-     * @internal
-     */
-    _tenantAdminComponent;
-    /**
-     * Include the stack with errors.
-     * @internal
-     */
-    _includeErrorStack;
-    /**
-     * The scope value that grants cross-tenant access.
-     * @internal
-     */
-    _escalatedPrivilegeScope;
-    /**
-     * Create a new instance of TenantOverrideProcessor.
-     * @param options Options for the processor.
-     */
-    constructor(options) {
-        this._tenantAdminComponent = ComponentFactory.get(options?.tenantAdminComponentType ?? "tenant-admin");
-        this._includeErrorStack = options?.config?.includeErrorStack ?? false;
-        this._escalatedPrivilegeScope =
-            options?.config?.escalatedPrivilegeScope ??
-                TenantOverrideProcessor.DEFAULT_ESCALATED_PRIVILEGE_SCOPE;
-    }
-    /**
-     * Returns the class name of the component.
-     * @returns The class name of the component.
-     */
-    className() {
-        return TenantOverrideProcessor.CLASS_NAME;
-    }
-    /**
-     * Pre process the REST request for the specified route.
-     * @param request The incoming request.
-     * @param response The outgoing response.
-     * @param route The route to process.
-     * @param contextIds The context IDs of the request.
-     * @param processorState The state handed through the processors.
-     * @returns A promise that resolves when the tenant override has been applied or skipped.
-     */
-    async pre(request, response, route, contextIds, processorState) {
-        if (Is.empty(route) || (route.disableTenantOverride ?? false)) {
-            return;
-        }
-        const overrideTenantParam = request.query?.[TenantOverrideProcessor.OVERRIDE_TENANT_PARAM];
-        if (!Is.stringValue(overrideTenantParam)) {
-            return;
-        }
-        // If a prior processor already set an error response, skip processing.
-        if (Is.notEmpty(response.statusCode)) {
-            return;
-        }
-        try {
-            // Caller must hold the escalated privilege scope.
-            if (!ScopeHelper.includes(contextIds[HttpContextIdKeys.Scope], this._escalatedPrivilegeScope)) {
-                throw new ForbiddenError(TenantOverrideProcessor.CLASS_NAME, "insufficientScopeForTenantOverride");
-            }
-            // Verify the tenant exists before substituting.
-            await this.verifyTenantExists(overrideTenantParam);
-            contextIds[HttpContextIdKeys.OriginalTenant] = contextIds[ContextIdKeys.Tenant];
-            contextIds[ContextIdKeys.Tenant] = overrideTenantParam;
-        }
-        catch (err) {
-            const error = BaseError.fromError(err);
-            const { httpStatusCode } = HttpErrorHelper.processError(error);
-            HttpErrorHelper.buildResponse(response, error, httpStatusCode, this._includeErrorStack);
-        }
-    }
-    /**
-     * Confirm the tenant being switched to exists.
-     * @param tenantId The tenant id from the override query parameter.
-     * @throws NotFoundError if no tenant matches the id.
-     * @internal
-     */
-    async verifyTenantExists(tenantId) {
-        let tenant;
-        try {
-            tenant = await this._tenantAdminComponent.get(tenantId);
-        }
-        catch (err) {
-            // An id that matches no tenant, or is not even well formed, is a not found; anything
-            // else is a genuine fault and keeps its own status code.
-            if (BaseError.isErrorName(err, NotFoundError.CLASS_NAME) ||
-                BaseError.isErrorName(err, GuardError.CLASS_NAME)) {
-                throw new NotFoundError(TenantOverrideProcessor.CLASS_NAME, "tenantNotFound", tenantId, undefined, err);
-            }
-            throw err;
-        }
-        if (tenant.id !== tenantId) {
-            throw new NotFoundError(TenantOverrideProcessor.CLASS_NAME, "tenantNotFound", tenantId);
-        }
-    }
-}
-//# sourceMappingURL=tenantOverrideProcessor.js.map

package/dist/es/tenantOverrideProcessor.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"tenantOverrideProcessor.js","sourceRoot":"","sources":["../../src/tenantOverrideProcessor.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,uCAAuC;AACvC,OAAO,EACN,cAAc,EACd,iBAAiB,EACjB,eAAe,EACf,WAAW,EAOX,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,aAAa,EAAoB,MAAM,iBAAiB,CAAC;AAClE,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,UAAU,EAAE,EAAE,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAI1F;;;;GAIG;AACH,MAAM,OAAO,uBAAuB;IACnC;;OAEG;IACI,MAAM,CAAU,qBAAqB,GAAW,iBAAiB,CAAC;IAEzE;;OAEG;IACI,MAAM,CAAU,iCAAiC,GAAW,cAAc,CAAC;IAElF;;OAEG;IACI,MAAM,CAAU,UAAU,6BAA6C;IAE9E;;;OAGG;IACc,qBAAqB,CAAwB;IAE9D;;;OAGG;IACc,kBAAkB,CAAU;IAE7C;;;OAGG;IACc,wBAAwB,CAAS;IAElD;;;OAGG;IACH,YAAY,OAAoD;QAC/D,IAAI,CAAC,qBAAqB,GAAG,gBAAgB,CAAC,GAAG,CAChD,OAAO,EAAE,wBAAwB,IAAI,cAAc,CACnD,CAAC;QACF,IAAI,CAAC,kBAAkB,GAAG,OAAO,EAAE,MAAM,EAAE,iBAAiB,IAAI,KAAK,CAAC;QACtE,IAAI,CAAC,wBAAwB;YAC5B,OAAO,EAAE,MAAM,EAAE,uBAAuB;gBACxC,uBAAuB,CAAC,iCAAiC,CAAC;IAC5D,CAAC;IAED;;;OAGG;IACI,SAAS;QACf,OAAO,uBAAuB,CAAC,UAAU,CAAC;IAC3C,CAAC;IAED;;;;;;;;OAQG;IACI,KAAK,CAAC,GAAG,CACf,OAA2B,EAC3B,QAAuB,EACvB,KAA6B,EAC7B,UAAuB,EACvB,cAAyC;QAEzC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,qBAAqB,IAAI,KAAK,CAAC,EAAE,CAAC;YAC/D,OAAO;QACR,CAAC;QAED,MAAM,mBAAmB,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC,uBAAuB,CAAC,qBAAqB,CAAC,CAAC;QAC3F,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,mBAAmB,CAAC,EAAE,CAAC;YAC1C,OAAO;QACR,CAAC;QAED,uEAAuE;QACvE,IAAI,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YACtC,OAAO;QACR,CAAC;QAED,IAAI,CAAC;YACJ,kDAAkD;YAClD,IACC,CAAC,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,wBAAwB,CAAC,EACxF,CAAC;gBACF,MAAM,IAAI,cAAc,CACvB,uBAAuB,CAAC,UAAU,EAClC,oCAAoC,CACpC,CAAC;YACH,CAAC;YAED,gDAAgD;YAChD,MAAM,IAAI,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAC;YAEnD,UAAU,CAAC,iBAAiB,CAAC,cAAc,CAAC,GAAG,UAAU,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;YAChF,UAAU,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,mBAAmB,CAAC;QACxD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,MAAM,KAAK,GAAG,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,EAAE,cAAc,EAAE,GAAG,eAAe,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;YAC/D,eAAe,CAAC,aAAa,CAAC,QAAQ,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACzF,CAAC;IACF,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,kBAAkB,CAAC,QAAgB;QAChD,IAAI,MAAe,CAAC;QAEpB,IAAI,CAAC;YACJ,MAAM,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,qFAAqF;YACrF,yDAAyD;YACzD,IACC,SAAS,CAAC,WAAW,CAAC,GAAG,EAAE,aAAa,CAAC,UAAU,CAAC;gBACpD,SAAS,CAAC,WAAW,CAAC,GAAG,EAAE,UAAU,CAAC,UAAU,CAAC,EAChD,CAAC;gBACF,MAAM,IAAI,aAAa,CACtB,uBAAuB,CAAC,UAAU,EAClC,gBAAgB,EAChB,QAAQ,EACR,SAAS,EACT,GAAG,CACH,CAAC;YACH,CAAC;YACD,MAAM,GAAG,CAAC;QACX,CAAC;QAED,IAAI,MAAM,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;YAC5B,MAAM,IAAI,aAAa,CAAC,uBAAuB,CAAC,UAAU,EAAE,gBAAgB,EAAE,QAAQ,CAAC,CAAC;QACzF,CAAC;IACF,CAAC","sourcesContent":["// Copyright 2026 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\nimport {\n\tForbiddenError,\n\tHttpContextIdKeys,\n\tHttpErrorHelper,\n\tScopeHelper,\n\ttype IBaseRoute,\n\ttype IBaseRouteProcessor,\n\ttype IHttpResponse,\n\ttype IHttpServerRequest,\n\ttype ITenant,\n\ttype ITenantAdminComponent\n} from \"@3sixty/api-models\";\nimport { ContextIdKeys, type IContextIds } from \"@3sixty/context\";\nimport { BaseError, ComponentFactory, GuardError, Is, NotFoundError } from \"@3sixty/core\";\nimport { nameof } from \"@3sixty/nameof\";\nimport type { ITenantOverrideProcessorConstructorOptions } from \"./models/ITenantOverrideProcessorConstructorOptions.js\";\n\n/**\n * Processes the overrideTenant query parameter for routes that allow tenant override.\n * Requires the caller to hold the escalated privilege scope. Runs after AuthHeaderProcessor so\n * authentication is always resolved in the caller's own partition first.\n */\nexport class TenantOverrideProcessor implements IBaseRouteProcessor {\n\t/**\n\t * The query parameter name used to supply the override tenant ID.\n\t */\n\tpublic static readonly OVERRIDE_TENANT_PARAM: string = \"override-tenant\";\n\n\t/**\n\t * The scope string required to perform a tenant override.\n\t */\n\tpublic static readonly DEFAULT_ESCALATED_PRIVILEGE_SCOPE: string = \"global-admin\";\n\n\t/**\n\t * Runtime name for the class.\n\t */\n\tpublic static readonly CLASS_NAME: string = nameof<TenantOverrideProcessor>();\n\n\t/**\n\t * The component used to resolve tenants, which also provides the lookup caching.\n\t * @internal\n\t */\n\tprivate readonly _tenantAdminComponent: ITenantAdminComponent;\n\n\t/**\n\t * Include the stack with errors.\n\t * @internal\n\t */\n\tprivate readonly _includeErrorStack: boolean;\n\n\t/**\n\t * The scope value that grants cross-tenant access.\n\t * @internal\n\t */\n\tprivate readonly _escalatedPrivilegeScope: string;\n\n\t/**\n\t * Create a new instance of TenantOverrideProcessor.\n\t * @param options Options for the processor.\n\t */\n\tconstructor(options?: ITenantOverrideProcessorConstructorOptions) {\n\t\tthis._tenantAdminComponent = ComponentFactory.get<ITenantAdminComponent>(\n\t\t\toptions?.tenantAdminComponentType ?? \"tenant-admin\"\n\t\t);\n\t\tthis._includeErrorStack = options?.config?.includeErrorStack ?? false;\n\t\tthis._escalatedPrivilegeScope =\n\t\t\toptions?.config?.escalatedPrivilegeScope ??\n\t\t\tTenantOverrideProcessor.DEFAULT_ESCALATED_PRIVILEGE_SCOPE;\n\t}\n\n\t/**\n\t * Returns the class name of the component.\n\t * @returns The class name of the component.\n\t */\n\tpublic className(): string {\n\t\treturn TenantOverrideProcessor.CLASS_NAME;\n\t}\n\n\t/**\n\t * Pre process the REST request for the specified route.\n\t * @param request The incoming request.\n\t * @param response The outgoing response.\n\t * @param route The route to process.\n\t * @param contextIds The context IDs of the request.\n\t * @param processorState The state handed through the processors.\n\t * @returns A promise that resolves when the tenant override has been applied or skipped.\n\t */\n\tpublic async pre(\n\t\trequest: IHttpServerRequest,\n\t\tresponse: IHttpResponse,\n\t\troute: IBaseRoute | undefined,\n\t\tcontextIds: IContextIds,\n\t\tprocessorState: { [id: string]: unknown }\n\t): Promise<void> {\n\t\tif (Is.empty(route) || (route.disableTenantOverride ?? false)) {\n\t\t\treturn;\n\t\t}\n\n\t\tconst overrideTenantParam = request.query?.[TenantOverrideProcessor.OVERRIDE_TENANT_PARAM];\n\t\tif (!Is.stringValue(overrideTenantParam)) {\n\t\t\treturn;\n\t\t}\n\n\t\t// If a prior processor already set an error response, skip processing.\n\t\tif (Is.notEmpty(response.statusCode)) {\n\t\t\treturn;\n\t\t}\n\n\t\ttry {\n\t\t\t// Caller must hold the escalated privilege scope.\n\t\t\tif (\n\t\t\t\t!ScopeHelper.includes(contextIds[HttpContextIdKeys.Scope], this._escalatedPrivilegeScope)\n\t\t\t) {\n\t\t\t\tthrow new ForbiddenError(\n\t\t\t\t\tTenantOverrideProcessor.CLASS_NAME,\n\t\t\t\t\t\"insufficientScopeForTenantOverride\"\n\t\t\t\t);\n\t\t\t}\n\n\t\t\t// Verify the tenant exists before substituting.\n\t\t\tawait this.verifyTenantExists(overrideTenantParam);\n\n\t\t\tcontextIds[HttpContextIdKeys.OriginalTenant] = contextIds[ContextIdKeys.Tenant];\n\t\t\tcontextIds[ContextIdKeys.Tenant] = overrideTenantParam;\n\t\t} catch (err) {\n\t\t\tconst error = BaseError.fromError(err);\n\t\t\tconst { httpStatusCode } = HttpErrorHelper.processError(error);\n\t\t\tHttpErrorHelper.buildResponse(response, error, httpStatusCode, this._includeErrorStack);\n\t\t}\n\t}\n\n\t/**\n\t * Confirm the tenant being switched to exists.\n\t * @param tenantId The tenant id from the override query parameter.\n\t * @throws NotFoundError if no tenant matches the id.\n\t * @internal\n\t */\n\tprivate async verifyTenantExists(tenantId: string): Promise<void> {\n\t\tlet tenant: ITenant;\n\n\t\ttry {\n\t\t\ttenant = await this._tenantAdminComponent.get(tenantId);\n\t\t} catch (err) {\n\t\t\t// An id that matches no tenant, or is not even well formed, is a not found; anything\n\t\t\t// else is a genuine fault and keeps its own status code.\n\t\t\tif (\n\t\t\t\tBaseError.isErrorName(err, NotFoundError.CLASS_NAME) ||\n\t\t\t\tBaseError.isErrorName(err, GuardError.CLASS_NAME)\n\t\t\t) {\n\t\t\t\tthrow new NotFoundError(\n\t\t\t\t\tTenantOverrideProcessor.CLASS_NAME,\n\t\t\t\t\t\"tenantNotFound\",\n\t\t\t\t\ttenantId,\n\t\t\t\t\tundefined,\n\t\t\t\t\terr\n\t\t\t\t);\n\t\t\t}\n\t\t\tthrow err;\n\t\t}\n\n\t\tif (tenant.id !== tenantId) {\n\t\t\tthrow new NotFoundError(TenantOverrideProcessor.CLASS_NAME, \"tenantNotFound\", tenantId);\n\t\t}\n\t}\n}\n"]}

package/dist/types/models/ITenantOverrideProcessorConfig.d.ts

@@ -1,13 +0,0 @@
-/**
- * Configuration for the TenantOverrideProcessor.
- */
-export interface ITenantOverrideProcessorConfig {
-    /**
-     * Include the stack with errors.
-     */
-    includeErrorStack?: boolean;
-    /**
-     * The scope value that grants escalated privilege for cross-tenant access. Defaults to "global-admin".
-     */
-    escalatedPrivilegeScope?: string;
-}

package/dist/types/models/ITenantOverrideProcessorConstructorOptions.d.ts

@@ -1,15 +0,0 @@
-import type { ITenantOverrideProcessorConfig } from "./ITenantOverrideProcessorConfig.js";
-/**
- * Options for the TenantOverrideProcessor constructor.
- */
-export interface ITenantOverrideProcessorConstructorOptions {
-    /**
-     * The component used to resolve tenants, which also provides the lookup caching.
-     * @default tenant-admin
-     */
-    tenantAdminComponentType?: string;
-    /**
-     * Configuration for the processor.
-     */
-    config?: ITenantOverrideProcessorConfig;
-}

package/dist/types/tenantOverrideProcessor.d.ts

@@ -1,44 +0,0 @@
-import { type IBaseRoute, type IBaseRouteProcessor, type IHttpResponse, type IHttpServerRequest } from "@3sixty/api-models";
-import { type IContextIds } from "@3sixty/context";
-import type { ITenantOverrideProcessorConstructorOptions } from "./models/ITenantOverrideProcessorConstructorOptions.js";
-/**
- * Processes the overrideTenant query parameter for routes that allow tenant override.
- * Requires the caller to hold the escalated privilege scope. Runs after AuthHeaderProcessor so
- * authentication is always resolved in the caller's own partition first.
- */
-export declare class TenantOverrideProcessor implements IBaseRouteProcessor {
-    /**
-     * The query parameter name used to supply the override tenant ID.
-     */
-    static readonly OVERRIDE_TENANT_PARAM: string;
-    /**
-     * The scope string required to perform a tenant override.
-     */
-    static readonly DEFAULT_ESCALATED_PRIVILEGE_SCOPE: string;
-    /**
-     * Runtime name for the class.
-     */
-    static readonly CLASS_NAME: string;
-    /**
-     * Create a new instance of TenantOverrideProcessor.
-     * @param options Options for the processor.
-     */
-    constructor(options?: ITenantOverrideProcessorConstructorOptions);
-    /**
-     * Returns the class name of the component.
-     * @returns The class name of the component.
-     */
-    className(): string;
-    /**
-     * Pre process the REST request for the specified route.
-     * @param request The incoming request.
-     * @param response The outgoing response.
-     * @param route The route to process.
-     * @param contextIds The context IDs of the request.
-     * @param processorState The state handed through the processors.
-     * @returns A promise that resolves when the tenant override has been applied or skipped.
-     */
-    pre(request: IHttpServerRequest, response: IHttpResponse, route: IBaseRoute | undefined, contextIds: IContextIds, processorState: {
-        [id: string]: unknown;
-    }): Promise<void>;
-}

package/docs/reference/classes/TenantOverrideProcessor.md

@@ -1,119 +0,0 @@
-# Class: TenantOverrideProcessor
-
-Processes the overrideTenant query parameter for routes that allow tenant override.
-Requires the caller to hold the escalated privilege scope. Runs after AuthHeaderProcessor so
-authentication is always resolved in the caller's own partition first.
-
-## Implements
-
-- `IBaseRouteProcessor`
-
-## Constructors
-
-### Constructor
-
-> **new TenantOverrideProcessor**(`options?`): `TenantOverrideProcessor`
-
-Create a new instance of TenantOverrideProcessor.
-
-#### Parameters
-
-##### options?
-
-[`ITenantOverrideProcessorConstructorOptions`](../interfaces/ITenantOverrideProcessorConstructorOptions.md)
-
-Options for the processor.
-
-#### Returns
-
-`TenantOverrideProcessor`
-
-## Properties
-
-### OVERRIDE\_TENANT\_PARAM {#override_tenant_param}
-
-> `readonly` `static` **OVERRIDE\_TENANT\_PARAM**: `string` = `"override-tenant"`
-
-The query parameter name used to supply the override tenant ID.
-
-***
-
-### DEFAULT\_ESCALATED\_PRIVILEGE\_SCOPE {#default_escalated_privilege_scope}
-
-> `readonly` `static` **DEFAULT\_ESCALATED\_PRIVILEGE\_SCOPE**: `string` = `"global-admin"`
-
-The scope string required to perform a tenant override.
-
-***
-
-### CLASS\_NAME {#class_name}
-
-> `readonly` `static` **CLASS\_NAME**: `string`
-
-Runtime name for the class.
-
-## Methods
-
-### className() {#classname}
-
-> **className**(): `string`
-
-Returns the class name of the component.
-
-#### Returns
-
-`string`
-
-The class name of the component.
-
-#### Implementation of
-
-`IBaseRouteProcessor.className`
-
-***
-
-### pre() {#pre}
-
-> **pre**(`request`, `response`, `route`, `contextIds`, `processorState`): `Promise`\<`void`\>
-
-Pre process the REST request for the specified route.
-
-#### Parameters
-
-##### request
-
-`IHttpServerRequest`
-
-The incoming request.
-
-##### response
-
-`IHttpResponse`
-
-The outgoing response.
-
-##### route
-
-`IBaseRoute` \| `undefined`
-
-The route to process.
-
-##### contextIds
-
-`IContextIds`
-
-The context IDs of the request.
-
-##### processorState
-
-The state handed through the processors.
-
-#### Returns
-
-`Promise`\<`void`\>
-
-A promise that resolves when the tenant override has been applied or skipped.
-
-#### Implementation of
-
-`IBaseRouteProcessor.pre`

package/docs/reference/interfaces/ITenantOverrideProcessorConfig.md

@@ -1,19 +0,0 @@
-# Interface: ITenantOverrideProcessorConfig
-
-Configuration for the TenantOverrideProcessor.
-
-## Properties
-
-### includeErrorStack? {#includeerrorstack}
-
-> `optional` **includeErrorStack?**: `boolean`
-
-Include the stack with errors.
-
-***
-
-### escalatedPrivilegeScope? {#escalatedprivilegescope}
-
-> `optional` **escalatedPrivilegeScope?**: `string`
-
-The scope value that grants escalated privilege for cross-tenant access. Defaults to "global-admin".

package/docs/reference/interfaces/ITenantOverrideProcessorConstructorOptions.md

@@ -1,25 +0,0 @@
-# Interface: ITenantOverrideProcessorConstructorOptions
-
-Options for the TenantOverrideProcessor constructor.
-
-## Properties
-
-### tenantAdminComponentType? {#tenantadmincomponenttype}
-
-> `optional` **tenantAdminComponentType?**: `string`
-
-The component used to resolve tenants, which also provides the lookup caching.
-
-#### Default
-
-```ts
-tenant-admin
-```
-
-***
-
-### config? {#config}
-
-> `optional` **config?**: [`ITenantOverrideProcessorConfig`](ITenantOverrideProcessorConfig.md)
-
-Configuration for the processor.