Optional ReadonlycontextThe request being authorized, when there is one. Pass it whenever the check serves a request: without it the scope is not compared against the request's resolved tenant, so a check for another tenant is answered from the grants alone.
ReadonlyscopeThe scope the check is about, or null for global grants only.
The target of a scoped check: the scope, and — from a guard or decorator — the request context, which lets the evaluator memoise grants for the rest of the request and compare the scope against the resolved request tenant.
A
nullscope asks about global grants only.Since
0.9.0