getRealAccess() — supabase Function Reference

Architecture documentation for the getRealAccess() function in AccessToken.utils.ts from the supabase codebase.

Function typescript ContentManagement AccessControl calls 1 called by 2

Entity Profile

ContentManagement→ AccessControl→ getRealAccess() — supabase Function Reference

Dependency Diagram

graph TD
  fbf87d1c_fe51_5bf1_87cb_3b68d93eee80["getRealAccess()"]
  fc0c7623_a643_3b2d_a07e_d015b593e2fb["ViewTokenSheet()"]
  fc0c7623_a643_3b2d_a07e_d015b593e2fb -->|calls| fbf87d1c_fe51_5bf1_87cb_3b68d93eee80
  22a9ee12_f62e_6418_f74e_46b8fd2a178b["useGroupedPermissions()"]
  22a9ee12_f62e_6418_f74e_46b8fd2a178b -->|calls| fbf87d1c_fe51_5bf1_87cb_3b68d93eee80
  37c20ca5_e55b_39d6_cabb_1c71c730b719["getResourcePermissions()"]
  fbf87d1c_fe51_5bf1_87cb_3b68d93eee80 -->|calls| 37c20ca5_e55b_39d6_cabb_1c71c730b719
  style fbf87d1c_fe51_5bf1_87cb_3b68d93eee80 fill:#6366f1,stroke:#818cf8,color:#fff

Relationship Graph

Source Code

apps/studio/components/interfaces/Account/AccessTokens/AccessToken.utils.ts lines 95–119

export const getRealAccess = (resource: string, tokenPermissions: string[]) => {
  const resourcePermissions = getResourcePermissions(resource)
  const actionTypes = ['read', 'write', 'create', 'delete'] as const
  const grantedActions = actionTypes.filter((action) =>
    resourcePermissions[action]?.some((p) => tokenPermissions.includes(p))
  )

  if (grantedActions.length === 0) {
    return 'no access'
  }

  if (grantedActions.length === 1) {
    return grantedActions[0]
  }

  if (
    grantedActions.length === 2 &&
    grantedActions[0] === 'read' &&
    grantedActions[1] === 'write'
  ) {
    return 'read-write'
  }

  return grantedActions.join('-')
}