@base44-preview/sdk 0.8.50-pr.290.00d2bf0 → 0.8.50-pr.290.25880e1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -950,15 +950,9 @@ type DynamicEntitiesModule = {
|
|
|
950
950
|
* - **Anonymous or User authentication** (`base44.entities`): Access is scoped to the current user's permissions. Anonymous users can only access public entities, while authenticated users can access entities they have permission to view or modify.
|
|
951
951
|
* - **Service role authentication** (`base44.asServiceRole.entities`): Operations bypass entity access rules and field-level security entirely. Can read and write any record in any entity.
|
|
952
952
|
*
|
|
953
|
-
* ##
|
|
953
|
+
* ## Read and write denial
|
|
954
954
|
*
|
|
955
|
-
*
|
|
956
|
-
*
|
|
957
|
-
* | Operation | When a rule denies it |
|
|
958
|
-
* | --- | --- |
|
|
959
|
-
* | `list()`, `filter()` | Returns an empty result, the same as if nothing matched. No error is thrown. |
|
|
960
|
-
* | `get()` | Throws a not-found error, whether or not the record exists. |
|
|
961
|
-
* | `create()`, `update()` | Throws a permission error with HTTP 403. |
|
|
955
|
+
* A row-level security rule that denies a read doesn't raise an error. `list()` and `filter()` return an empty result, indistinguishable from a query that matched nothing. A denied `create()`, `update()`, or `delete()` throws instead, with an HTTP 403 status.
|
|
962
956
|
*
|
|
963
957
|
* ## Entity Handlers
|
|
964
958
|
*
|