Vex · Scope policies

Table not granted (`scope_denied`)

compile throws scope_denied for a query on a table the scope policy does not list: a policy built from grants denies by default. The check runs before the query is resolved. Example: the member role is granted reads on shows and bookings and nothing on members.

Query

{ from: ['members'], fields: ['members.name'] }

Grants

['shows.read', 'bookings.read', 'bookings.write.insert']

Error

scope_denied
Entity "members" is not allowed by scope policy (default: deny)

Output matches the expected value

Runs in this page on the installed package. The input and the expected output are defined by the example.

Table not granted (scope_denied)

Table not granted (`scope_denied`)