Access

Permissions

Every operation maps to one readable atomic permission. The interface reflects authorization; the server enforces it.

Planned scope

Route and navigation are live. The detailed interface for this section is still being built.

  • Atomic permission catalogue grouped by domain
  • Role-to-permission matrix for the five roles
  • Which permissions require step-up re-authentication
  • The full chain: session, membership, role, permission, scope, consent, risk, audit

Screen build in progress

This section is scaffolded, not simulated. It will read through the typed LYFE-ID service layer once the dedicated LYFE-ID Supabase project is provisioned.