Skip to content

decideStoredFlowsAccess

function decideStoredFlowsAccess(
policy,
permission,
args): Promise<PolicyDecision>;

Absent policy → allow (dev-router default). A deny (or ask) is 403. Sabotage this to always { kind: 'allow' } to prove the 403 test bites.

Parameter Type

policy

Policy | undefined

permission

"stored-flows:read" | "stored-flows:write"

args

unknown

Promise<PolicyDecision>