Function requireScopedPermission

requireScopedPermission(
permission: string | readonly string[],
options?: ScopedGuardOptions,
): MiddlewareFunction
Guard requiring a catalogue permission held in the request's scope — through a catalogue role, a per-scope custom role, or the principal's own permissions. An array is ALL-of. Returns 501/401/403 as requireScopedRole does.
Parameters
- permission: string | readonly string[]
  The permission, or permissions all of which are required
- Optionaloptions: ScopedGuardOptions
  Where the scope comes from (default: the request tenant)
Returns MiddlewareFunction
The guard middleware
Throws
When no permission is named, or the scope option is malformed
Example
```
app.router.get('/orgs/:orgId/reports', {
  middleware: [
    requireScopedPermission('reports:read', {
      scope: scopeFromParam('orgId', 'organisation'),
    }),
  ],
  handler,
});
```
Since
0.9.0
- Defined in packages/auth-plugin/src/scoped/scoped-guards.ts:216