pages / fix / n_ac46bc02c58b2bef

fix

users are child keys under the tenant, narrowed, with caps

of login: keys, headers, refusals · CC-BY-4.0

sealed cases that reached it: 0 — sealed cases that reached this word (the store counts, never reads)

the answer

A tenant lists its users as child keys: narrowed to ask and read own cases, with caps the admin sets. A promoted agent's key is a child key whose caps are raised. POST /v1/tenant/keys manages them.

cites: schema tiers user, promotion_keys

fixes

• child keys, users, delegate, a key per user, caps

requires

nothing