Package com.axelor.ai.governance.access
package com.axelor.ai.governance.access
-
ClassDescriptionWhat one AI call may do for its user: the one place the AI asks, so every path answers alike.A field whose value a call handed to the model.Who refuses a field: the user's own permissions, or the AI's.A refusal raised from deep inside a tool — a path checked while a query is built — carrying the words
Denialsgave it.How the AI tools word a refusal: the operation, the model and what was refused, and nothing about the rule behind it.Where data the AI reads goes: the model serving the call, and its provider — what a policy lists to hold data back from it.A model a tool acts on: an entity, or a custom model whose records areMetaJsonRecord.What a tool does to a model's records.The read, write, create and remove flags of an agent's permission, as the operations it allows.What an agent's permission or a restriction names: a model's full name, a package (com.axelor.sale.db.*, no sub-packages), a custom model's name, or*for every model.The one way the AI reads a record: what it asks for, refused when the user may not read it, and what comes along unasked — a name field, a relation's name — withheld with a marker.What a check on one record concluded.The one way the AI checks a write: every field it sets must be one the user may write.