IdentityRole

class flow_api.identity_role.IdentityRole(select=None, cls=None, init=None, by='id', allow_normal=True, allow_deleted=False, commit=False, grants_apply=<class 'flow_api.system.NotSet'>, identity_id=<class 'flow_api.system.NotSet'>, propagate=<class 'flow_api.system.NotSet'>, role_id=<class 'flow_api.system.NotSet'>, debug=False)

Base class: Row

Mapping an identity to a role.

Parameters

Name	Type	Description
allow_deleted	bool
allow_normal	bool
by	str
cls	Optional
commit	bool
debug	bool	if set, the content of the data being written will be logged.
grants_apply	Union	Whether this role assignment contributes its ALLOW (grant) permissions to the identity. Defaults True for directly-assigned roles. Set False on the deny-only assignment copies that _apply_roles propagates into created (execution) identities for a parent role whose grants do NOT propagate (propagate=False) but which carries DENY permissions: such a copy contributes ONLY its DENY permissions in auth_get_permissions, so a DENY is inescapable across delegation while grants still attenuate with propagate. See operator-task-flow-api-read-deny-bypass-honour-role-permission.
identity_id	Union	Reference to the identity the role is mapped to.
init	Optional
propagate	Union	A flag to control if this role is propagated to other records created by the identity.
role_id	Union	Reference to the role the identity is mapped to.
select	Optional

Constants

RESOURCE = identity_role

Methods

clone

details

delete

details

duplicate

details

exists

details

export

details

get

details

get_dict

details

identity

details

restore

details

role

details

save

details