Interface StorageProgramACL

Robust Access Control for Storage Programs Applies to both JSON and Binary encodings

ACL Resolution Priority:

Owner -> FULL ACCESS (always)
Blacklisted -> DENIED (even if in allowed/groups)
Allowed -> permissions granted
Groups -> check group permissions
Mode fallback:
- "owner" -> DENIED
- "public" -> READ only
- "restricted" -> DENIED

interface StorageProgramACL {
    allowed?: string[];
    blacklisted?: string[];
    groups?: Record<string, StorageGroupPermissions>;
    mode: StorageACLMode;
}

Index

Properties

allowed? blacklisted? groups? mode

Properties

`Optional`allowed

allowed?: string[]

Addresses explicitly allowed to read/write

`Optional`blacklisted

blacklisted?: string[]

Addresses explicitly blocked (takes precedence over allowed/groups)

`Optional`groups

groups?: Record<string, StorageGroupPermissions>

Named groups with member addresses and permissions

mode

mode: StorageACLMode

Access mode determining default behavior