Backstage permission decisions

Backstage permission decisions A workflow diagram generated by Archify. 01 / User 02 / Permission framework 03 / Decision User request · Access a plugin action · User User request Access a plugin action Permission Framework · Plugin authorization · Permission framework · focal Permission Framework Plugin authorization focal Permission Policy · Evaluate request · Permission framework Permission Policy Evaluate request Current policy · Explicit grants; default deny · Permission framework Current policy Explicit grants; default deny Deny · DENY · Decision Deny DENY Allow · ALLOW · Decision Allow ALLOW Conditional · CONDITIONAL · Decision Conditional CONDITIONAL consult Legend User UI Agent logic Policy External system

Published policy

  • • Platform team explicitly allowed
  • • Authenticated catalog reads allowed
  • • Catalog delete requires ownership; other actions denied

Conditional enforcement

  • • Backend evaluates IS_ENTITY_OWNER on resources
  • • A conditional response is not unconditional access
  • • Plugin authorization coverage remains required