Core · RBAC
RBAC Overview
Role-based access control organizes permissions into a clear, composable hierarchy.
The hierarchy
Colveor models access control as a hierarchy:
Module → Permission → Role → User Role Assignment
Diagram
Module
Feature boundary
Permission
Granular action
Role
Grouped permissions
User Role
Assignment to a user
Concepts
- Module
- A feature boundary that groups related permissions.
- Permission
- A granular, checkable action within a module.
- Role
- A named collection of permissions.
- User Role
- An assignment that grants a role's permissions to a specific user.
Note
This structure lets you reason about access at whichever level makes sense — coarse-grained roles for administration, or fine-grained permissions for sensitive actions.