← Back to Activities Workflows

5.6.7 Authorization Entity Reference

Source: app/plugins/Activities/src/Model/Entity/Authorization.php

Authorization represents one member’s time-bounded permission to participate in one Activity. It extends ActiveWindowBaseEntity and defines these status constants:

• APPROVED_STATUS
• PENDING_STATUS
• DENIED_STATUS
• REVOKED_STATUS
• EXPIRED_STATUS
• RETRACTED_STATUS

Core associations include the member, activity, granted member role, and revoking member. The composite type identity uses activity/member IDs. getBranchId() resolves scope through the member and returns the deny-only sentinel when no branch can be determined.

Mutation rules

Ordinary request input may assign only the narrow fields allowed by the entity. Status, approval count, granted role, revoker, reason, and workflow outcomes belong to DefaultAuthorizationManager and workflow actions. Do not expand _accessible to make an administrative form convenient.

Use ActiveWindow semantics for current/upcoming/expired behavior and entity constants for status comparisons. Load the member before policy/branch evaluation when practical; fallback lookup still uses the active tenant.