{ "schema_version": "0.1.0", "catalogue_status": "discovery_inventory", "authority": "Suggested exhaustive permission catalogue from the source. Eligibility is not grant. Each action is described as independently supporting use_allowed and delegate_allowed.", "category": "permissions_catalogue", "eligibility_legend": { "P": "primary_author", "S": "secondary_author", "U": "use_key", "K": "keyring_key" }, "tiers": [ { "tier": 0, "name": "Owner-only sovereign permissions", "permissions": [ { "action": "owner.account.create", "eligible_key_types": [], "owner_only": true, "source_line": 19 }, { "action": "owner.account.read_private", "eligible_key_types": [], "owner_only": true, "source_line": 20 }, { "action": "owner.account.update_username", "eligible_key_types": [], "owner_only": true, "source_line": 21 }, { "action": "owner.account.update_email", "eligible_key_types": [], "owner_only": true, "source_line": 22 }, { "action": "owner.account.update_password", "eligible_key_types": [], "owner_only": true, "source_line": 23 }, { "action": "owner.account.configure_passkeys", "eligible_key_types": [], "owner_only": true, "source_line": 24 }, { "action": "owner.account.configure_recovery", "eligible_key_types": [], "owner_only": true, "source_line": 25 }, { "action": "owner.account.lock", "eligible_key_types": [], "owner_only": true, "source_line": 26 }, { "action": "owner.account.unlock", "eligible_key_types": [], "owner_only": true, "source_line": 27 }, { "action": "owner.session.list", "eligible_key_types": [], "owner_only": true, "source_line": 28 }, { "action": "owner.session.revoke", "eligible_key_types": [], "owner_only": true, "source_line": 29 }, { "action": "owner.session.revoke_all", "eligible_key_types": [], "owner_only": true, "source_line": 30 }, { "action": "owner.delete", "eligible_key_types": [], "owner_only": true, "source_line": 31 }, { "action": "owner.transfer", "eligible_key_types": [], "owner_only": true, "source_line": 32 }, { "action": "billing.read", "eligible_key_types": [], "owner_only": true, "source_line": 34 }, { "action": "billing.update", "eligible_key_types": [], "owner_only": true, "source_line": 35 }, { "action": "billing.payment_method", "eligible_key_types": [], "owner_only": true, "source_line": 36 }, { "action": "billing.invoice.read", "eligible_key_types": [], "owner_only": true, "source_line": 37 }, { "action": "billing.subscription.change", "eligible_key_types": [], "owner_only": true, "source_line": 38 }, { "action": "system.owner.create_gift", "eligible_key_types": [], "owner_only": true, "source_line": 40 }, { "action": "system.owner.create_commercial", "eligible_key_types": [], "owner_only": true, "source_line": 41 }, { "action": "system.owner.suspend", "eligible_key_types": [], "owner_only": true, "source_line": 42 }, { "action": "system.owner.restore", "eligible_key_types": [], "owner_only": true, "source_line": 43 }, { "action": "system.tenant.enter_oversight", "eligible_key_types": [], "owner_only": true, "source_line": 44 }, { "action": "system.tenant.freeze", "eligible_key_types": [], "owner_only": true, "source_line": 45 }, { "action": "system.tenant.unfreeze", "eligible_key_types": [], "owner_only": true, "source_line": 46 }, { "action": "tenant.owner.change", "eligible_key_types": [], "owner_only": true, "source_line": 48 }, { "action": "tenant.transfer", "eligible_key_types": [], "owner_only": true, "source_line": 49 }, { "action": "tenant.delete", "eligible_key_types": [], "owner_only": true, "source_line": 50 }, { "action": "tenant.destroy_data", "eligible_key_types": [], "owner_only": true, "source_line": 51 }, { "action": "security.break_glass", "eligible_key_types": [], "owner_only": true, "source_line": 53 }, { "action": "security.override_parent_policy", "eligible_key_types": [], "owner_only": true, "source_line": 54 }, { "action": "security.force_recovery", "eligible_key_types": [], "owner_only": true, "source_line": 55 }, { "action": "security.disable_global_alerting", "eligible_key_types": [], "owner_only": true, "source_line": 56 }, { "action": "audit.delete", "eligible_key_types": [], "owner_only": true, "source_line": 58 }, { "action": "audit.modify", "eligible_key_types": [], "owner_only": true, "source_line": 59 }, { "action": "audit.rewrite", "eligible_key_types": [], "owner_only": true, "source_line": 60 }, { "action": "event.delete", "eligible_key_types": [], "owner_only": true, "source_line": 61 }, { "action": "event.modify", "eligible_key_types": [], "owner_only": true, "source_line": 62 }, { "action": "signature.replace", "eligible_key_types": [], "owner_only": true, "source_line": 63 }, { "action": "key.private.read", "eligible_key_types": [], "owner_only": true, "source_line": 65 }, { "action": "key.private.export_server", "eligible_key_types": [], "owner_only": true, "source_line": 66 }, { "action": "key.reparent", "eligible_key_types": [], "owner_only": true, "source_line": 67 }, { "action": "key.unrevoke", "eligible_key_types": [], "owner_only": true, "source_line": 68 }, { "action": "key.erase_history", "eligible_key_types": [], "owner_only": true, "source_line": 69 } ], "source": { "file": "docs/seed/Permissions_Catalogue.txt", "lines": "15" } }, { "tier": 1, "name": "Key identity and directory", "permissions": [ { "action": "key.self.read", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 75 }, { "action": "key.public.read", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 76 }, { "action": "key.public.export", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 77 }, { "action": "key.public.resolve", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 78 }, { "action": "key.status.read", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 79 }, { "action": "key.component_status.read", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 80 }, { "action": "key.fingerprint.read", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 81 }, { "action": "key.lineage.read_self", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 82 }, { "action": "key.lineage.read_children", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 83 }, { "action": "key.lineage.read_descendants", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 84 }, { "action": "key.children.list", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 85 }, { "action": "key.descendants.list", "eligible_key_types": [ "primary_author" ], "owner_only": false, "qualification": null, "source_line": 86 }, { "action": "key.policy.read_self", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 87 }, { "action": "key.policy.read_children", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 88 }, { "action": "key.policy.read_descendants", "eligible_key_types": [ "primary_author" ], "owner_only": false, "qualification": null, "source_line": 89 }, { "action": "key.history.read_self", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 90 }, { "action": "key.history.read_children", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 91 }, { "action": "key.label.update_self", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 92 }, { "action": "key.label.update_child", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 93 }, { "action": "key.metadata.update_self", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 94 }, { "action": "key.metadata.update_child", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 95 }, { "action": "key.public_bundle.export_self", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 96 }, { "action": "key.public_bundle.export_descendant", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 97 } ], "source": { "file": "docs/seed/Permissions_Catalogue.txt", "lines": "73" } }, { "tier": 2, "name": "Child minting and enrollment", "permissions": [ { "action": "key.mint.primary", "eligible_key_types": [ "primary_author" ], "owner_only": false, "qualification": null, "source_line": 100 }, { "action": "key.mint.secondary", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 101 }, { "action": "key.mint.use", "eligible_key_types": [ "primary_author", "secondary_author", "use_key" ], "owner_only": false, "qualification": null, "source_line": 102 }, { "action": "key.mint.keyring", "eligible_key_types": [ "primary_author", "secondary_author", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 103 }, { "action": "key.mint.ephemeral_use", "eligible_key_types": [ "primary_author", "secondary_author", "use_key" ], "owner_only": false, "qualification": null, "source_line": 104 }, { "action": "key.claim.issue", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": "within allowed child types", "source_line": 105 }, { "action": "key.claim.cancel", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": "for own pending children", "source_line": 106 }, { "action": "key.claim.reissue", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": "for own pending children", "source_line": 107 }, { "action": "key.claim.view_status", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 108 }, { "action": "key.claim.change_destination", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 109 }, { "action": "key.child.activate", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": "for allowed child type", "source_line": 110 }, { "action": "key.child.cancel_draft", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 111 }, { "action": "key.child.set_label", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 112 }, { "action": "key.child.set_expiry", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 113 }, { "action": "key.child.set_audience", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 114 }, { "action": "key.child.set_scope", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 115 }, { "action": "key.child.set_rate_limit", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 116 }, { "action": "key.child.set_total_use_limit", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 117 }, { "action": "key.child.set_signature_requirement", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 118 }, { "action": "key.child.set_approval_requirement", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 119 }, { "action": "key.child.set_delegation_depth", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 120 }, { "action": "key.child.set_child_limit", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 121 }, { "action": "key.child.use_policy_template", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 122 } ], "source": { "file": "docs/seed/Permissions_Catalogue.txt", "lines": "98" } }, { "tier": 3, "name": "Policy management", "permissions": [ { "action": "policy.evaluate_self", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 128 }, { "action": "policy.explain_self", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 129 }, { "action": "policy.diff_self", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 130 }, { "action": "policy.diff_child", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 131 }, { "action": "policy.propose_child", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 132 }, { "action": "policy.apply_child", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 133 }, { "action": "policy.reduce_child", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 134 }, { "action": "policy.expand_child_within_ceiling", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 135 }, { "action": "policy.lock_child", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 136 }, { "action": "policy.set_action_scope", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 137 }, { "action": "policy.set_resource_scope", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 138 }, { "action": "policy.set_namespace_scope", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 139 }, { "action": "policy.set_recipient_scope", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 140 }, { "action": "policy.set_audience", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 141 }, { "action": "policy.set_not_before", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 142 }, { "action": "policy.set_expiration", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 143 }, { "action": "policy.set_time_window", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 144 }, { "action": "policy.set_rate_limit", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 145 }, { "action": "policy.set_total_use_limit", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 146 }, { "action": "policy.set_network_condition", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 147 }, { "action": "policy.set_environment", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 148 }, { "action": "policy.set_required_signatures", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 149 }, { "action": "policy.set_approval_requirement", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 150 }, { "action": "policy.set_mint_matrix", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 151 }, { "action": "policy.set_max_depth", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 152 }, { "action": "policy.set_max_children", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 153 }, { "action": "policy.set_max_child_ttl", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 154 }, { "action": "policy.set_propagation_ceiling", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 155 }, { "action": "policy.request_owner_expansion", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 156 }, { "action": "policy.read_effective_descendant", "eligible_key_types": [ "primary_author" ], "owner_only": false, "qualification": null, "source_line": 157 }, { "action": "policy.export", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 158 } ], "source": { "file": "docs/seed/Permissions_Catalogue.txt", "lines": "126" } }, { "tier": 4, "name": "Key lifecycle and compromise response", "permissions": [ { "action": "key.retire.self", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 164 }, { "action": "key.suspend.self", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 165 }, { "action": "key.compromise.report_self", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 166 }, { "action": "key.compromise.report_child", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 167 }, { "action": "key.suspend.child", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 168 }, { "action": "key.resume.child", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 169 }, { "action": "key.quarantine.child", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 170 }, { "action": "key.unquarantine.child", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": "possibly approval-required", "source_line": 171 }, { "action": "key.revoke.child", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 172 }, { "action": "key.revoke.subtree", "eligible_key_types": [ "primary_author" ], "owner_only": false, "qualification": null, "source_line": 173 }, { "action": "key.freeze_branch", "eligible_key_types": [ "primary_author" ], "owner_only": false, "qualification": null, "source_line": 174 }, { "action": "key.unfreeze_branch", "eligible_key_types": [ "primary_author" ], "owner_only": false, "qualification": "approval recommended", "source_line": 175 }, { "action": "key.rotate.auth_self", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 176 }, { "action": "key.rotate.delegate_self", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 177 }, { "action": "key.rotate.author_self", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 178 }, { "action": "key.rotate.box_self", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 179 }, { "action": "key.rotate.auth_child", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 180 }, { "action": "key.rotate.delegate_child", "eligible_key_types": [ "primary_author" ], "owner_only": false, "qualification": null, "source_line": 181 }, { "action": "key.rotate.author_child", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 182 }, { "action": "key.rotate.box_child", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 183 }, { "action": "key.rotation.view_status", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 184 }, { "action": "key.rotation.cancel_pending", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 185 }, { "action": "key.rotation.finalize", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 186 }, { "action": "key.rotation.set_grace_period", "eligible_key_types": [ "primary_author" ], "owner_only": false, "qualification": null, "source_line": 187 }, { "action": "key.old_public.verify", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 188 }, { "action": "key.descendant_status.read", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 189 }, { "action": "key.descendant_bulk_suspend", "eligible_key_types": [ "primary_author" ], "owner_only": false, "qualification": null, "source_line": 190 }, { "action": "key.descendant_bulk_revoke", "eligible_key_types": [ "primary_author" ], "owner_only": false, "qualification": "Owner approval recommended", "source_line": 191 } ], "source": { "file": "docs/seed/Permissions_Catalogue.txt", "lines": "162" } }, { "tier": 5, "name": "Authorship", "permissions": [ { "action": "author.draft.create", "eligible_key_types": [ "primary_author", "secondary_author", "use_key" ], "owner_only": false, "qualification": null, "source_line": 199 }, { "action": "author.draft.read_own", "eligible_key_types": [ "primary_author", "secondary_author", "use_key" ], "owner_only": false, "qualification": null, "source_line": 200 }, { "action": "author.draft.update_own", "eligible_key_types": [ "primary_author", "secondary_author", "use_key" ], "owner_only": false, "qualification": null, "source_line": 201 }, { "action": "author.draft.delete_own", "eligible_key_types": [ "primary_author", "secondary_author", "use_key" ], "owner_only": false, "qualification": null, "source_line": 202 }, { "action": "author.object.sign", "eligible_key_types": [ "primary_author", "secondary_author", "use_key" ], "owner_only": false, "qualification": null, "source_line": 203 }, { "action": "author.object.publish", "eligible_key_types": [ "primary_author", "secondary_author", "use_key" ], "owner_only": false, "qualification": null, "source_line": 204 }, { "action": "author.object.version_create", "eligible_key_types": [ "primary_author", "secondary_author", "use_key" ], "owner_only": false, "qualification": null, "source_line": 205 }, { "action": "author.object.amend", "eligible_key_types": [ "primary_author", "secondary_author", "use_key" ], "owner_only": false, "qualification": null, "source_line": 206 }, { "action": "author.object.withdraw", "eligible_key_types": [ "primary_author", "secondary_author", "use_key" ], "owner_only": false, "qualification": null, "source_line": 207 }, { "action": "author.object.archive", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 208 }, { "action": "author.object.read_own", "eligible_key_types": [ "primary_author", "secondary_author", "use_key" ], "owner_only": false, "qualification": null, "source_line": 209 }, { "action": "author.object.read_children", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 210 }, { "action": "author.object.read_descendants", "eligible_key_types": [ "primary_author" ], "owner_only": false, "qualification": null, "source_line": 211 }, { "action": "author.object.list_own", "eligible_key_types": [ "primary_author", "secondary_author", "use_key" ], "owner_only": false, "qualification": null, "source_line": 212 }, { "action": "author.object.list_descendants", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 213 }, { "action": "author.object.cosign", "eligible_key_types": [ "primary_author", "secondary_author", "use_key" ], "owner_only": false, "qualification": null, "source_line": 214 }, { "action": "author.cosign.request", "eligible_key_types": [ "primary_author", "secondary_author", "use_key" ], "owner_only": false, "qualification": null, "source_line": 215 }, { "action": "author.cosign.cancel_request", "eligible_key_types": [ "primary_author", "secondary_author", "use_key" ], "owner_only": false, "qualification": null, "source_line": 216 }, { "action": "author.object.verify", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 217 }, { "action": "author.object.export", "eligible_key_types": [ "primary_author", "secondary_author", "use_key" ], "owner_only": false, "qualification": null, "source_line": 218 }, { "action": "author.metadata.write", "eligible_key_types": [ "primary_author", "secondary_author", "use_key" ], "owner_only": false, "qualification": null, "source_line": 219 }, { "action": "author.provenance.attach", "eligible_key_types": [ "primary_author", "secondary_author", "use_key" ], "owner_only": false, "qualification": null, "source_line": 220 }, { "action": "author.provenance.read", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 221 }, { "action": "author.provenance.export", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 222 }, { "action": "author.namespace.create", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 223 }, { "action": "author.namespace.use", "eligible_key_types": [ "primary_author", "secondary_author", "use_key" ], "owner_only": false, "qualification": null, "source_line": 224 }, { "action": "author.namespace.admin", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 225 }, { "action": "author.namespace.delegate", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 226 }, { "action": "author.namespace.archive", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 227 } ], "source": { "file": "docs/seed/Permissions_Catalogue.txt", "lines": "197" } }, { "tier": 6, "name": "Credentials and attestations", "permissions": [ { "action": "credential.draft.create", "eligible_key_types": [ "primary_author", "secondary_author", "use_key" ], "owner_only": false, "qualification": null, "source_line": 236 }, { "action": "credential.draft.update", "eligible_key_types": [ "primary_author", "secondary_author", "use_key" ], "owner_only": false, "qualification": null, "source_line": 237 }, { "action": "credential.draft.delete", "eligible_key_types": [ "primary_author", "secondary_author", "use_key" ], "owner_only": false, "qualification": null, "source_line": 238 }, { "action": "credential.issue", "eligible_key_types": [ "primary_author", "secondary_author", "use_key" ], "owner_only": false, "qualification": null, "source_line": 239 }, { "action": "credential.sign", "eligible_key_types": [ "primary_author", "secondary_author", "use_key" ], "owner_only": false, "qualification": null, "source_line": 240 }, { "action": "credential.verify", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 241 }, { "action": "credential.present", "eligible_key_types": [ "primary_author", "secondary_author", "use_key" ], "owner_only": false, "qualification": null, "source_line": 242 }, { "action": "credential.accept", "eligible_key_types": [ "primary_author", "secondary_author", "use_key" ], "owner_only": false, "qualification": null, "source_line": 243 }, { "action": "credential.reject", "eligible_key_types": [ "primary_author", "secondary_author", "use_key" ], "owner_only": false, "qualification": null, "source_line": 244 }, { "action": "credential.read_own", "eligible_key_types": [ "primary_author", "secondary_author", "use_key" ], "owner_only": false, "qualification": null, "source_line": 245 }, { "action": "credential.read_descendants", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 246 }, { "action": "credential.list_own", "eligible_key_types": [ "primary_author", "secondary_author", "use_key" ], "owner_only": false, "qualification": null, "source_line": 247 }, { "action": "credential.status.read", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 248 }, { "action": "credential.suspend", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 249 }, { "action": "credential.resume", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 250 }, { "action": "credential.revoke", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 251 }, { "action": "credential.renew", "eligible_key_types": [ "primary_author", "secondary_author", "use_key" ], "owner_only": false, "qualification": null, "source_line": 252 }, { "action": "credential.set_expiry", "eligible_key_types": [ "primary_author", "secondary_author", "use_key" ], "owner_only": false, "qualification": null, "source_line": 253 }, { "action": "credential.set_audience", "eligible_key_types": [ "primary_author", "secondary_author", "use_key" ], "owner_only": false, "qualification": null, "source_line": 254 }, { "action": "credential.set_subject_scope", "eligible_key_types": [ "primary_author", "secondary_author", "use_key" ], "owner_only": false, "qualification": null, "source_line": 255 }, { "action": "credential.set_presentation_limit", "eligible_key_types": [ "primary_author", "secondary_author", "use_key" ], "owner_only": false, "qualification": null, "source_line": 256 }, { "action": "credential.schema.use", "eligible_key_types": [ "primary_author", "secondary_author", "use_key" ], "owner_only": false, "qualification": null, "source_line": 257 }, { "action": "credential.schema.create", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 258 }, { "action": "credential.schema.admin", "eligible_key_types": [ "primary_author" ], "owner_only": false, "qualification": null, "source_line": 259 }, { "action": "credential.issuance.delegate", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 260 }, { "action": "credential.provenance.read", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 261 }, { "action": "credential.provenance.export", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 262 } ], "source": { "file": "docs/seed/Permissions_Catalogue.txt", "lines": "231" } }, { "tier": 7, "name": "Sharing", "permissions": [ { "action": "share.create", "eligible_key_types": [ "primary_author", "secondary_author", "use_key" ], "owner_only": false, "qualification": null, "source_line": 265 }, { "action": "share.read_own", "eligible_key_types": [ "primary_author", "secondary_author", "use_key" ], "owner_only": false, "qualification": null, "source_line": 266 }, { "action": "share.list_own", "eligible_key_types": [ "primary_author", "secondary_author", "use_key" ], "owner_only": false, "qualification": null, "source_line": 267 }, { "action": "share.accept", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 268 }, { "action": "share.decline", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 269 }, { "action": "share.revoke_own", "eligible_key_types": [ "primary_author", "secondary_author", "use_key" ], "owner_only": false, "qualification": null, "source_line": 270 }, { "action": "share.revoke_descendant", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 271 }, { "action": "share.forward", "eligible_key_types": [ "primary_author", "secondary_author", "use_key" ], "owner_only": false, "qualification": null, "source_line": 272 }, { "action": "share.add_recipient", "eligible_key_types": [ "primary_author", "secondary_author", "use_key" ], "owner_only": false, "qualification": null, "source_line": 273 }, { "action": "share.remove_recipient", "eligible_key_types": [ "primary_author", "secondary_author", "use_key" ], "owner_only": false, "qualification": null, "source_line": 274 }, { "action": "share.set_expiry", "eligible_key_types": [ "primary_author", "secondary_author", "use_key" ], "owner_only": false, "qualification": null, "source_line": 275 }, { "action": "share.set_access_count", "eligible_key_types": [ "primary_author", "secondary_author", "use_key" ], "owner_only": false, "qualification": null, "source_line": 276 }, { "action": "share.set_forwarding_rule", "eligible_key_types": [ "primary_author", "secondary_author", "use_key" ], "owner_only": false, "qualification": null, "source_line": 277 }, { "action": "share.read_receipt_request", "eligible_key_types": [ "primary_author", "secondary_author", "use_key" ], "owner_only": false, "qualification": null, "source_line": 278 }, { "action": "share.read_receipt_view", "eligible_key_types": [ "primary_author", "secondary_author", "use_key" ], "owner_only": false, "qualification": null, "source_line": 279 }, { "action": "share.metadata.read", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 280 }, { "action": "share.ciphertext.fetch", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 281 }, { "action": "share.provenance.read", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 282 } ], "source": { "file": "docs/seed/Permissions_Catalogue.txt", "lines": "263" } }, { "tier": 8, "name": "Communications", "permissions": [ { "action": "message.send", "eligible_key_types": [ "primary_author", "secondary_author", "use_key" ], "owner_only": false, "qualification": null, "source_line": 288 }, { "action": "message.list_own", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 289 }, { "action": "message.metadata.read", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 290 }, { "action": "message.ciphertext.fetch", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 291 }, { "action": "message.reply", "eligible_key_types": [ "primary_author", "secondary_author", "use_key" ], "owner_only": false, "qualification": null, "source_line": 292 }, { "action": "message.forward", "eligible_key_types": [ "primary_author", "secondary_author", "use_key" ], "owner_only": false, "qualification": null, "source_line": 293 }, { "action": "message.delete_own", "eligible_key_types": [ "primary_author", "secondary_author", "use_key" ], "owner_only": false, "qualification": null, "source_line": 294 }, { "action": "message.revoke_unread", "eligible_key_types": [ "primary_author", "secondary_author", "use_key" ], "owner_only": false, "qualification": null, "source_line": 295 }, { "action": "message.receipt.request", "eligible_key_types": [ "primary_author", "secondary_author", "use_key" ], "owner_only": false, "qualification": null, "source_line": 296 }, { "action": "message.receipt.send", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 297 }, { "action": "message.recipient.resolve", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 298 }, { "action": "message.recipient_public_key.read", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 299 }, { "action": "channel.create", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 300 }, { "action": "channel.read", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 301 }, { "action": "channel.join", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 302 }, { "action": "channel.leave", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 303 }, { "action": "channel.invite", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 304 }, { "action": "channel.remove_member", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 305 }, { "action": "channel.update_metadata", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 306 }, { "action": "channel.rotate_encryption", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 307 }, { "action": "channel.close", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 308 }, { "action": "channel.provenance.read", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 309 } ], "source": { "file": "docs/seed/Permissions_Catalogue.txt", "lines": "286" } }, { "tier": 9, "name": "Keyring custody", "permissions": [ { "action": "keyring.create", "eligible_key_types": [ "primary_author", "secondary_author", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 318 }, { "action": "keyring.metadata.read", "eligible_key_types": [ "primary_author", "secondary_author", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 319 }, { "action": "keyring.metadata.update", "eligible_key_types": [ "primary_author", "secondary_author", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 320 }, { "action": "keyring.ciphertext.fetch", "eligible_key_types": [ "primary_author", "secondary_author", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 321 }, { "action": "keyring.reference.add", "eligible_key_types": [ "primary_author", "secondary_author", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 322 }, { "action": "keyring.reference.remove", "eligible_key_types": [ "primary_author", "secondary_author", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 323 }, { "action": "keyring.member.list", "eligible_key_types": [ "primary_author", "secondary_author", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 324 }, { "action": "keyring.bundle.create", "eligible_key_types": [ "primary_author", "secondary_author", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 325 }, { "action": "keyring.bundle.replace", "eligible_key_types": [ "primary_author", "secondary_author", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 326 }, { "action": "keyring.bundle.export_encrypted", "eligible_key_types": [ "primary_author", "secondary_author", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 327 }, { "action": "keyring.share", "eligible_key_types": [ "primary_author", "secondary_author", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 328 }, { "action": "keyring.share.revoke", "eligible_key_types": [ "primary_author", "secondary_author", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 329 }, { "action": "keyring.rotate_box", "eligible_key_types": [ "primary_author", "secondary_author", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 330 }, { "action": "keyring.set_expiry", "eligible_key_types": [ "primary_author", "secondary_author", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 331 }, { "action": "keyring.set_recipient_scope", "eligible_key_types": [ "primary_author", "secondary_author", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 332 }, { "action": "keyring.destroy", "eligible_key_types": [ "primary_author", "secondary_author", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 333 }, { "action": "keyring.provenance.read", "eligible_key_types": [ "primary_author", "secondary_author", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 334 } ], "source": { "file": "docs/seed/Permissions_Catalogue.txt", "lines": "313" } }, { "tier": 10, "name": "Audit and provenance", "permissions": [ { "action": "audit.read_self", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 345 }, { "action": "audit.read_children", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 346 }, { "action": "audit.read_descendants", "eligible_key_types": [ "primary_author" ], "owner_only": false, "qualification": null, "source_line": 347 }, { "action": "audit.read_tenant", "eligible_key_types": [ "primary_author" ], "owner_only": false, "qualification": "explicit only", "source_line": 348 }, { "action": "audit.export_self", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 349 }, { "action": "audit.export_children", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 350 }, { "action": "audit.export_descendants", "eligible_key_types": [ "primary_author" ], "owner_only": false, "qualification": null, "source_line": 351 }, { "action": "audit.verify_hash_chain", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 352 }, { "action": "audit.authentication.read_self", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 353 }, { "action": "audit.authentication.read_descendants", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 354 }, { "action": "audit.denials.read_self", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 355 }, { "action": "audit.denials.read_descendants", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 356 }, { "action": "audit.policy_changes.read_self", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 357 }, { "action": "audit.policy_changes.read_descendants", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 358 }, { "action": "audit.key_lifecycle.read_self", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 359 }, { "action": "audit.key_lifecycle.read_descendants", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 360 }, { "action": "audit.authorship.read_self", "eligible_key_types": [ "primary_author", "secondary_author", "use_key" ], "owner_only": false, "qualification": null, "source_line": 361 }, { "action": "audit.authorship.read_descendants", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 362 }, { "action": "audit.message_metadata.read_self", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 363 }, { "action": "audit.message_metadata.read_descendants", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 364 }, { "action": "audit.annotate_self", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 365 }, { "action": "audit.annotate_descendant", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 366 }, { "action": "provenance.verify", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 367 }, { "action": "provenance.export", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 368 }, { "action": "provenance.lineage.read", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 369 } ], "source": { "file": "docs/seed/Permissions_Catalogue.txt", "lines": "343" } }, { "tier": 11, "name": "Alerts and security controls", "permissions": [ { "action": "alert.read_self", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 375 }, { "action": "alert.read_children", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 376 }, { "action": "alert.read_descendants", "eligible_key_types": [ "primary_author" ], "owner_only": false, "qualification": null, "source_line": 377 }, { "action": "alert.acknowledge_self", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 378 }, { "action": "alert.acknowledge_descendant", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 379 }, { "action": "alert.subscribe_self", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 380 }, { "action": "alert.subscribe_descendants", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 381 }, { "action": "alert.rule.create_self", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 382 }, { "action": "alert.rule.update_self", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 383 }, { "action": "alert.rule.delete_self", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 384 }, { "action": "alert.rule.create_descendant", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 385 }, { "action": "alert.rule.test", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 386 }, { "action": "security.risk.read_self", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 387 }, { "action": "security.risk.read_descendants", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 388 }, { "action": "security.compromise.report", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 389 }, { "action": "security.challenge.request", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 390 }, { "action": "security.challenge.respond", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 391 }, { "action": "security.freeze_self", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 392 }, { "action": "security.freeze_child", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 393 }, { "action": "security.freeze_subtree", "eligible_key_types": [ "primary_author" ], "owner_only": false, "qualification": null, "source_line": 394 }, { "action": "security.network_allowlist.update_self", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 395 }, { "action": "security.network_allowlist.update_child", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 396 }, { "action": "security.rate_clamp_self", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 397 }, { "action": "security.rate_clamp_child", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 398 }, { "action": "security.owner_review.request", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 399 } ], "source": { "file": "docs/seed/Permissions_Catalogue.txt", "lines": "373" } }, { "tier": 12, "name": "Public directory", "permissions": [ { "action": "directory.public_key.publish", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 405 }, { "action": "directory.public_key.unpublish", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 406 }, { "action": "directory.resolve", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 407 }, { "action": "directory.search", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 408 }, { "action": "directory.profile.read", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 409 }, { "action": "directory.profile.update_self", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 410 }, { "action": "directory.profile.update_child", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 411 }, { "action": "directory.alias.claim", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 412 }, { "action": "directory.alias.release", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 413 }, { "action": "directory.proof.verify", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 414 }, { "action": "directory.lineage.publish", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 415 }, { "action": "directory.provenance.publish", "eligible_key_types": [ "primary_author", "secondary_author", "use_key" ], "owner_only": false, "qualification": null, "source_line": 416 }, { "action": "directory.contact_policy.update", "eligible_key_types": [ "primary_author", "secondary_author", "use_key", "keyring_key" ], "owner_only": false, "qualification": null, "source_line": 417 } ], "source": { "file": "docs/seed/Permissions_Catalogue.txt", "lines": "403" } }, { "tier": 13, "name": "Integrations and automation", "permissions": [ { "action": "webhook.create", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 426 }, { "action": "webhook.read", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 427 }, { "action": "webhook.update", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 428 }, { "action": "webhook.delete", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 429 }, { "action": "webhook.rotate_secret", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 430 }, { "action": "webhook.replay_event", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 431 }, { "action": "integration.register", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 432 }, { "action": "integration.read", "eligible_key_types": [ "primary_author", "secondary_author", "use_key" ], "owner_only": false, "qualification": null, "source_line": 433 }, { "action": "integration.disable", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 434 }, { "action": "integration.scope.update", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 435 }, { "action": "export.bulk", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 436 }, { "action": "import.bulk", "eligible_key_types": [ "primary_author" ], "owner_only": false, "qualification": null, "source_line": 437 }, { "action": "automation.create", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 438 }, { "action": "automation.update", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 439 }, { "action": "automation.disable", "eligible_key_types": [ "primary_author", "secondary_author" ], "owner_only": false, "qualification": null, "source_line": 440 }, { "action": "automation.execute", "eligible_key_types": [ "primary_author", "secondary_author", "use_key" ], "owner_only": false, "qualification": null, "source_line": 441 } ], "source": { "file": "docs/seed/Permissions_Catalogue.txt", "lines": "421" }, "mvp_status": "reserved_and_deferred" } ], "cross_cutting_rules": [ "Eligibility does not mean automatic grant", "Every listed action should independently support use_allowed and delegate_allowed", "Tier 0 permissions must never be granted to an API Key" ], "sources": [ { "file": "docs/seed/Permissions_Catalogue.txt", "lines": "1-443" } ] }