Function scopeFromParam

scopeFromParam(
param: string,
type: string,
): (ctx: IRequestContext) => ScopeRef | undefined
The scope named by a route parameter. Unresolved — so the check denies — when the parameter is absent, empty or too long.

When the request also has a resolved tenant and type is the tenant scope type, a parameter naming a DIFFERENT tenant is refused by the evaluator, so a caller cannot evaluate another tenant's grants by editing the path.
Parameters
- param: string
  The route parameter name (orgId for /orgs/:orgId)
- type: string
  The scope type the parameter names
Returns (ctx: IRequestContext) => ScopeRef | undefined
A scope source
Throws
When param is empty or type is not lowercase kebab-case
Example
```
requireScopedRole('admin', { scope: scopeFromParam('orgId', 'organisation') });
```
Since
0.9.0
- Defined in packages/common/src/services/scope-sources.ts:91