Function authorize

authorize(tenants, bindings, principal, permission, tenantId): boolean
Pure RBAC check. A binding grants its permissions on its tenant and every descendant. Separation of duties: an author cannot approve, so publishing a policy always needs a second principal.
Parameters
- tenants: readonly Tenant[]
- bindings: readonly RoleBinding[]
- principal: string
- permission: Permission
- tenantId: string
Returns boolean
- Defined in core/src/tenancy.ts:55