A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
{before_save: [do
if (__temp_1337 = @authority) && __temp_1337.new_record?
__temp_1337.save
self.authority_id = __temp_1337.id.not_nil!
end
end, do
if (__temp_1338 = @parent) && __temp_1338.new_record?
__temp_1338.save
self.parent_id = __temp_1338.id.not_nil!
end
end, :normalize_ad_group_mappings] of Nil, after_save: [] of Nil, before_create: [do
self.created_at = self.updated_at = Time.utc
end] of Nil, after_create: [] of Nil, before_update: [do
self.updated_at = Time.utc
end] of Nil, after_update: [] of Nil, before_destroy: [] of Nil, after_destroy: [do
end, do
end, :__record_history_destroy__] of Nil}
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
2
Objects may nest inside a feature value at most this many levels deep.
64
{:id => UUID} of Nil => Nil
macro level key => type
[{:id}]
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
A node in the group tree for an authority.
Deserializes the given JSON in string_or_io into an instance of self, assuming the JSON consists of an JSON object with key root, and whose value is the value to deserialize.
A node in the group tree for an authority.
Serialize from a trusted JSON source
Serialize from a trusted YAML source
A node in the group tree for an authority.
A node in the group tree for an authority.
A node in the group tree for an authority.
A node in the group tree for an authority.
A node in the group tree for an authority.
Initialize PlaceOS::Model::Group from HTTP::Params.
Recreates a deleted record from its latest delete entry, keeping its id.
Zone ids this user has any non-zero effective permission on, within subsystem.
Returns a self-contained SQL subquery (single column: zone id) yielding every zone where the user's effective permissions within any of #subsystems satisfy required (Manage is a superset).
Syncs a user's automatic group memberships with the AD groups they are currently a member of, within #authority_id:
Returns all attribute keys.
Entries recorded for the resource, newest first
A node in the group tree for an authority.
Changefeed at row (if #id passed) or whole table level.
Effective permission bitmask for (user, zone) within subsystem.
Effective permissions across a batch of zones.
A node in the group tree for an authority.
Fields not recorded, changes to only these fields are not recorded at all
Fields whose values are never recorded
A node in the group tree for an authority.
A node in the group tree for an authority.
Full {zone_id => Permissions} map for the user within subsystem.
A node in the group tree for an authority.
Does this user have any non-zero effective permission on this zone (directly or transitively) for subsystem?
#ad_group_mappings getter
#ad_group_mappings setter
NOTE use getter / getter! (not property / property!) so that the setter defined later in __create_initializer__ is the only setter on the field.
A node in the group tree for an authority.
Returns a Tuple of the previous and the current value of an instance variable if it has changed
A node in the group tree for an authority.
#ad_group_mappings's default value
AD group id => {display name, permissions bitmask}.
A node in the group tree for an authority.
A node in the group tree for an authority.
Include #ad_group_mappings in the set of changed attributes, whether it has changed or not.
A node in the group tree for an authority.
A node in the group tree for an authority.
A node in the group tree for an authority.
A node in the group tree for an authority.
A node in the group tree for an authority.
Generate code to apply default values
Assign to multiple attributes.
Assign to multiple attributes via HTTP::Params.
Assign to multiple attributes from a model object
A node in the group tree for an authority.
A node in the group tree for an authority.
A node in the group tree for an authority.
Assign each field from JSON if field exists in JSON and has changed in model
A node in the group tree for an authority.
Uses the YAML parser as JSON is valid YAML
Returns a Hash of all attribute values
Serialize attributes to JSON, without any other properties to_json may include, as .from_json expects them.
Serialize attributes to JSON, without any other properties to_json may include, as .from_json expects them.
Serialize attributes to JSON, without any other properties to_json may include, as .from_json expects them.
Returns a NamedTuple of all attribute values.
#authority_id getter
#authority_id setter
NOTE use getter / getter! (not property / property!) so that the setter defined later in __create_initializer__ is the only setter on the field.
A node in the group tree for an authority.
Returns a Tuple of the previous and the current value of an instance variable if it has changed
A node in the group tree for an authority.
#authority_id's default value
A node in the group tree for an authority.
A node in the group tree for an authority.
Include #authority_id in the set of changed attributes, whether it has changed or not.
A node in the group tree for an authority.
A node in the group tree for an authority.
A node in the group tree for an authority.
A node in the group tree for an authority.
Check if any attributes have changed.
Returns a Hash with all changed attributes.
Serialize the set of changed attributes to JSON.
Serialize the set of changed attributes to JSON.
A node in the group tree for an authority.
Serialize the set of changed attributes to YAML.
Serialize the set of changed attributes to YAML.
Returns a Hash of changed attributes, mapping each to a {previous, current} tuple.
Serialize changed attributes to JSON as {"attribute": [previous, current]}.
Serialize changed attributes to JSON as {"attribute": [previous, current]}.
Serialize changed attributes to JSON as {"attribute": [previous, current]}.
Immediate children.
Reset changes for all attributes.
#created_at getter
Setters #created_at setter
NOTE use getter / getter! (not property / property!) so that the setter defined later in __create_initializer__ is the only setter on the field.
A node in the group tree for an authority.
Returns a Tuple of the previous and the current value of an instance variable if it has changed
A node in the group tree for an authority.
#created_at's default value
A node in the group tree for an authority.
A node in the group tree for an authority.
Include #created_at in the set of changed attributes, whether it has changed or not.
#default_permissions getter
#default_permissions setter
NOTE use getter / getter! (not property / property!) so that the setter defined later in __create_initializer__ is the only setter on the field.
A node in the group tree for an authority.
Returns a Tuple of the previous and the current value of an instance variable if it has changed
A node in the group tree for an authority.
#default_permissions's default value
Stored as an Int32 bitmask.
A node in the group tree for an authority.
A node in the group tree for an authority.
Include #default_permissions in the set of changed attributes, whether it has changed or not.
All descendant group ids (including self) via a recursive CTE.
#description getter
#description setter
NOTE use getter / getter! (not property / property!) so that the setter defined later in __create_initializer__ is the only setter on the field.
A node in the group tree for an authority.
Returns a Tuple of the previous and the current value of an instance variable if it has changed
A node in the group tree for an authority.
#description's default value
A node in the group tree for an authority.
A node in the group tree for an authority.
Include #description in the set of changed attributes, whether it has changed or not.
Effective features for one subsystem ({} when nothing on the path sets it).
Features merged down the tree from the root to this group: for each subsystem, key by key, the deepest group that sets a key wins (a child's list replaces its parent's rather than unioning with it).
Is key truthy in this group's effective subsystem features? Truthy: true, a non-zero number, or a non-empty string / array / object.
#features getter
#features setter
NOTE use getter / getter! (not property / property!) so that the setter defined later in __create_initializer__ is the only setter on the field.
A node in the group tree for an authority.
Returns a Tuple of the previous and the current value of an instance variable if it has changed
A node in the group tree for an authority.
#features's default value
This group's own features for subsystem, without inheritance.
Per-subsystem feature flags / display config, keyed by subsystem code: {"signage" => {"templates" => true, "plugins" => [...]}}.
A node in the group tree for an authority.
A node in the group tree for an authority.
Include #features in the set of changed attributes, whether it has changed or not.
Direct GroupUser rows for this group.
Direct GroupZone rows for this group.
Overrides the action recorded by the next change, e.g.
Overrides the action recorded by the next change, e.g.
A parent the change should also be found under
Request details recorded with changes to this record, defaults to History.current_metadata
Request details recorded with changes to this record, defaults to History.current_metadata
#id getter
#id setter
A node in the group tree for an authority.
A node in the group tree for an authority.
Returns a Tuple of the previous and the current value of an instance variable if it has changed
A node in the group tree for an authority.
#id's default value
A node in the group tree for an authority.
A node in the group tree for an authority.
Include #id in the set of changed attributes, whether it has changed or not.
A node in the group tree for an authority.
#name getter
#name setter
NOTE use getter / getter! (not property / property!) so that the setter defined later in __create_initializer__ is the only setter on the field.
A node in the group tree for an authority.
Returns a Tuple of the previous and the current value of an instance variable if it has changed
A node in the group tree for an authority.
#name's default value
A node in the group tree for an authority.
A node in the group tree for an authority.
Include #name in the set of changed attributes, whether it has changed or not.
#parent_id getter
#parent_id setter
A node in the group tree for an authority.
Returns a Tuple of the previous and the current value of an instance variable if it has changed
A node in the group tree for an authority.
#parent_id's default value
A node in the group tree for an authority.
A node in the group tree for an authority.
Include #parent_id in the set of changed attributes, whether it has changed or not.
A node in the group tree for an authority.
A node in the group tree for an authority.
A node in the group tree for an authority.
Reset each attribute to their previous values and clears all changes.
#subsystems getter
#subsystems setter
NOTE use getter / getter! (not property / property!) so that the setter defined later in __create_initializer__ is the only setter on the field.
A node in the group tree for an authority.
Returns a Tuple of the previous and the current value of an instance variable if it has changed
A node in the group tree for an authority.
#subsystems's default value
A node in the group tree for an authority.
A node in the group tree for an authority.
Include #subsystems in the set of changed attributes, whether it has changed or not.
A node in the group tree for an authority.
#updated_at getter
#updated_at setter
NOTE use getter / getter! (not property / property!) so that the setter defined later in __create_initializer__ is the only setter on the field.
A node in the group tree for an authority.
Returns a Tuple of the previous and the current value of an instance variable if it has changed
A node in the group tree for an authority.
#updated_at's default value
A node in the group tree for an authority.
A node in the group tree for an authority.
Include #updated_at in the set of changed attributes, whether it has changed or not.
Validate that all non-nillable fields have values.
PlaceOS::Model::History::TrackedPlaceOS::Model::History::TrackedA node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
Deserializes the given JSON in string_or_io into
an instance of self, assuming the JSON consists
of an JSON object with key root, and whose value is
the value to deserialize. Will not deserialise from
fields with mass_assign: false
class User < ActiveModel::Model
attribute name : String
attribute google_id : UUID, mass_assign: false
end
User.from_json(%({"main": {"name": "Jason", "google_id": "f6f70bfb-c882-446d-8758-7ce47db39620"}}), root: "main") # => #<User:0x103131b20 @name="Jason">A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
Serialize from a trusted JSON source
Serialize from a trusted YAML source
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
Initialize PlaceOS::Model::Group from HTTP::Params.
Recreates a deleted record from its latest delete entry, keeping its id.
Records removed alongside it (cascading deletes) are not restored and redacted fields are left at their defaults. Raises if there is no delete entry or the record can't be saved, e.g. if it already exists.
Zone ids this user has any non-zero effective permission on, within
subsystem. Includes zones reached transitively (via ancestor
group membership and via ancestor zone GroupZone rows), minus
anything masked off by deny rows.
Returns a self-contained SQL subquery (single column: zone id)
yielding every zone where the user's effective permissions within any
of #subsystems satisfy required (Manage is a superset). The same
rules as .resolve_subsystem_permissions apply, but only the
per-row grant decisions are made in Crystal (bounded by the explicit
GroupUser / GroupZone rows) — the zone-subtree expansion runs
in the database via a recursive CTE, so the qualifying zone set is
never materialised in application memory. Returns nil when the user
holds no qualifying grants (callers should treat nil as an empty set).
Syncs a user's automatic group memberships with the AD groups they are
currently a member of, within #authority_id:
#ad_group_mappings contains
one of ad_groups (unless they are already a member),GroupUser#auto_assigned set) are removed
when the user is no longer in a mapped AD group for that group, and
updated when the mapping's permissions change.Memberships added manually (auto_assigned nil) are never modified.
When several of the user's AD groups map to the same group the
permissions are combined and the lowest AD group id is recorded.
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
Changefeed at row (if #id passed) or whole table level.
Returns a ChangeFeed instance which can be used to invoke async callbacks via on or
use blocking Iterator via each method.
Effective permission bitmask for (user, zone) within subsystem.
Effective permissions across a batch of zones. For every zone, the
closest applicable grant in that zone's own ancestry wins (replace
semantics — same rule as the single-zone form). Results are OR'd
across the list: this answers "what can the user do if any of
these zones is in play?". Zones with no applicable grant contribute
nothing. Returns Permissions::None for an empty list or for a
user who can't reach any of the supplied zones.
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
Fields not recorded, changes to only these fields are not recorded at all
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
Full {zone_id => Permissions} map for the user within subsystem.
Public entry point for callers that want to resolve once and cache the
whole map (e.g. a per-request memo), instead of re-resolving per query.
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
Does this user have any non-zero effective permission on this zone
(directly or transitively) for subsystem?
NOTE use getter / getter! (not property / property!) so that the
setter defined later in __create_initializer__ is the only setter on
the field. Crystal's overload resolution silently fails to replace a
property-defined setter with one of identical signature for generic
types (e.g. Set(String)?, Array(String)?, String | Array(String)),
although it does work for non-generic ones like String?. Defining the
setter only once via __create_initializer__ ensures change tracking,
sanitization, and custom setter blocks run uniformly across all types.
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
Returns a Tuple of the previous and the current value of an instance variable if it has changed
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
#ad_group_mappings's default value
AD group id => {display name, permissions bitmask}. Users who are members
of a mapped AD group are added to this group by .add_remove_ad_groups.
Keys are normalised (stripped + downcased) on save so matching is
case-insensitive.
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
Include #ad_group_mappings in the set of changed attributes, whether it has changed or not.
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
Assign to multiple attributes.
Assign to multiple attributes via HTTP::Params.
Assign to multiple attributes from a model object
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
Assign each field from JSON if field exists in JSON and has changed in model
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
Serialize attributes to JSON, without any other properties to_json may
include, as .from_json expects them.
Values are serialized as in to_json, applying any attribute converters.
Serialize attributes to JSON, without any other properties to_json may
include, as .from_json expects them.
Values are serialized as in to_json, applying any attribute converters.
Serialize attributes to JSON, without any other properties to_json may
include, as .from_json expects them.
Values are serialized as in to_json, applying any attribute converters.
NOTE use getter / getter! (not property / property!) so that the
setter defined later in __create_initializer__ is the only setter on
the field. Crystal's overload resolution silently fails to replace a
property-defined setter with one of identical signature for generic
types (e.g. Set(String)?, Array(String)?, String | Array(String)),
although it does work for non-generic ones like String?. Defining the
setter only once via __create_initializer__ ensures change tracking,
sanitization, and custom setter blocks run uniformly across all types.
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
Returns a Tuple of the previous and the current value of an instance variable if it has changed
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
Include #authority_id in the set of changed attributes, whether it has changed or not.
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
Serialize changed attributes to JSON as {"attribute": [previous, current]}.
Values are serialized as in to_json, applying any attribute converters.
Serialize changed attributes to JSON as {"attribute": [previous, current]}.
Values are serialized as in to_json, applying any attribute converters.
Serialize changed attributes to JSON as {"attribute": [previous, current]}.
Values are serialized as in to_json, applying any attribute converters.
NOTE use getter / getter! (not property / property!) so that the
setter defined later in __create_initializer__ is the only setter on
the field. Crystal's overload resolution silently fails to replace a
property-defined setter with one of identical signature for generic
types (e.g. Set(String)?, Array(String)?, String | Array(String)),
although it does work for non-generic ones like String?. Defining the
setter only once via __create_initializer__ ensures change tracking,
sanitization, and custom setter blocks run uniformly across all types.
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
Returns a Tuple of the previous and the current value of an instance variable if it has changed
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
Include #created_at in the set of changed attributes, whether it has changed or not.
NOTE use getter / getter! (not property / property!) so that the
setter defined later in __create_initializer__ is the only setter on
the field. Crystal's overload resolution silently fails to replace a
property-defined setter with one of identical signature for generic
types (e.g. Set(String)?, Array(String)?, String | Array(String)),
although it does work for non-generic ones like String?. Defining the
setter only once via __create_initializer__ ensures change tracking,
sanitization, and custom setter blocks run uniformly across all types.
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
Returns a Tuple of the previous and the current value of an instance variable if it has changed
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
Stored as an Int32 bitmask. Use permission_flags / permission_flags=
when working with the Permissions flags enum directly.
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
Include #default_permissions in the set of changed attributes, whether it has changed or not.
NOTE use getter / getter! (not property / property!) so that the
setter defined later in __create_initializer__ is the only setter on
the field. Crystal's overload resolution silently fails to replace a
property-defined setter with one of identical signature for generic
types (e.g. Set(String)?, Array(String)?, String | Array(String)),
although it does work for non-generic ones like String?. Defining the
setter only once via __create_initializer__ ensures change tracking,
sanitization, and custom setter blocks run uniformly across all types.
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
Returns a Tuple of the previous and the current value of an instance variable if it has changed
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
Include #description in the set of changed attributes, whether it has changed or not.
Effective features for one subsystem ({} when nothing on the path sets it).
Features merged down the tree from the root to this group: for each
subsystem, key by key, the deepest group that sets a key wins (a child's
list replaces its parent's rather than unioning with it). Uses this
group's in-memory #features, so unsaved edits are reflected.
Is key truthy in this group's effective subsystem features? Truthy:
true, a non-zero number, or a non-empty string / array / object.
Intended for server-side enforcement of features that matter beyond UI.
NOTE use getter / getter! (not property / property!) so that the
setter defined later in __create_initializer__ is the only setter on
the field. Crystal's overload resolution silently fails to replace a
property-defined setter with one of identical signature for generic
types (e.g. Set(String)?, Array(String)?, String | Array(String)),
although it does work for non-generic ones like String?. Defining the
setter only once via __create_initializer__ ensures change tracking,
sanitization, and custom setter blocks run uniformly across all types.
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
Returns a Tuple of the previous and the current value of an instance variable if it has changed
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
This group's own features for subsystem, without inheritance.
Per-subsystem feature flags / display config, keyed by subsystem code:
{"signage" => {"templates" => true, "plugins" => [...]}}. Keys inside a
subsystem are opaque to the backend. Children inherit their ancestors'
features and may override individual keys (see #effective_features).
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
Include #features in the set of changed attributes, whether it has changed or not.
Overrides the action recorded by the next change, e.g. approve
A parent the change should also be found under
Request details recorded with changes to this record, defaults to
History.current_metadata
Request details recorded with changes to this record, defaults to
History.current_metadata
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
Returns a Tuple of the previous and the current value of an instance variable if it has changed
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
Include #id in the set of changed attributes, whether it has changed or not.
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
NOTE use getter / getter! (not property / property!) so that the
setter defined later in __create_initializer__ is the only setter on
the field. Crystal's overload resolution silently fails to replace a
property-defined setter with one of identical signature for generic
types (e.g. Set(String)?, Array(String)?, String | Array(String)),
although it does work for non-generic ones like String?. Defining the
setter only once via __create_initializer__ ensures change tracking,
sanitization, and custom setter blocks run uniformly across all types.
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
Returns a Tuple of the previous and the current value of an instance variable if it has changed
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
Include #name in the set of changed attributes, whether it has changed or not.
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
Returns a Tuple of the previous and the current value of an instance variable if it has changed
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
Include #parent_id in the set of changed attributes, whether it has changed or not.
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
NOTE use getter / getter! (not property / property!) so that the
setter defined later in __create_initializer__ is the only setter on
the field. Crystal's overload resolution silently fails to replace a
property-defined setter with one of identical signature for generic
types (e.g. Set(String)?, Array(String)?, String | Array(String)),
although it does work for non-generic ones like String?. Defining the
setter only once via __create_initializer__ ensures change tracking,
sanitization, and custom setter blocks run uniformly across all types.
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
Returns a Tuple of the previous and the current value of an instance variable if it has changed
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
Include #subsystems in the set of changed attributes, whether it has changed or not.
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
NOTE use getter / getter! (not property / property!) so that the
setter defined later in __create_initializer__ is the only setter on
the field. Crystal's overload resolution silently fails to replace a
property-defined setter with one of identical signature for generic
types (e.g. Set(String)?, Array(String)?, String | Array(String)),
although it does work for non-generic ones like String?. Defining the
setter only once via __create_initializer__ ensures change tracking,
sanitization, and custom setter blocks run uniformly across all types.
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
Returns a Tuple of the previous and the current value of an instance variable if it has changed
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
A node in the group tree for an authority. The tree represents the
organisational hierarchy. Each group declares which subsystems
(signage, events, parking, ...) it participates in via the #subsystems
text array; subsystem-scoped permission queries are filtered against
that array. An authority may have several root groups (#parent_id nil),
each heading its own independent tree.
Include #updated_at in the set of changed attributes, whether it has changed or not.