Developer training

Identity, Capability, and Authority

Deny an unknown actor, then show a known actor who still cannot skip the decision.

Explanation

What you are learning

Recommended first: HIOP Fundamentals. You can still study this lesson.

Identity comes first. An actor the workstation has never registered is denied, reason unknown actor. Registration answers who is asking. It does not answer whether the effect may run. The second call uses a registered actor who is capable of naming lab.observe and skips the decision. That call is also refused. Know the actor, then decide the effect. Do not treat either step as optional.

Worked example

Teaching workstation

These fields were returned by the teaching workstation for this lesson. They are not a production permit.

Unknown actor

An actor who was never registered asks for lab.observe

outcome
DENY
dispatch
false
executed
false
reason
unknown_actor
effect
lab.observe
actor id
stranger
resource
scope-a
request id
who-1

Known actor, no decision

A registered actor is capable of naming lab.observe and skips the decision

outcome
DENY
dispatch
false
executed
false
reason
bypass_refused
effect
lab.observe
actor id
operator
resource
scope-a
request id
who-2
Exercise

Try it before you check

Compare the two reasons. One actor is unknown. The other is known and still has no permit.

Why is the stranger denied?
Assessment

Explain the result

Does a registered actor get to skip CRUSHIA?

This lesson is not complete yet.

Materials

Use these with the lesson

A passed check is saved in this browser so you can resume. It is not a certificate, not an accreditation, and not authority to run an effect.