@base44-preview/sdk 0.8.50-pr.290.25880e1 → 0.8.50-pr.290.40fc74a
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -950,9 +950,15 @@ type DynamicEntitiesModule = {
|
|
|
950
950
|
* - **Anonymous or User authentication** (`base44.entities`): Access is scoped to the current user's permissions. Anonymous users can only access public entities, while authenticated users can access entities they have permission to view or modify.
|
|
951
951
|
* - **Service role authentication** (`base44.asServiceRole.entities`): Operations bypass entity access rules and field-level security entirely. Can read and write any record in any entity.
|
|
952
952
|
*
|
|
953
|
-
* ##
|
|
953
|
+
* ## How denied reads and writes differ
|
|
954
954
|
*
|
|
955
|
-
*
|
|
955
|
+
* Row-level security handles reads and writes differently.
|
|
956
|
+
*
|
|
957
|
+
* | Operation | When a rule denies it |
|
|
958
|
+
* | --- | --- |
|
|
959
|
+
* | `list()`, `filter()` | Returns an empty result, the same as if nothing matched. No error is thrown. |
|
|
960
|
+
* | `get()` | Throws a not-found error, whether or not the record exists. |
|
|
961
|
+
* | `create()`, `update()` | Throws a permission error with HTTP 403. |
|
|
956
962
|
*
|
|
957
963
|
* ## Entity Handlers
|
|
958
964
|
*
|