Read the current session
Who the caller is, where they are, and what they may do there — resolved in a single query, so it is safe as the first call on load.
two_factor_available and uploads_available describe the platform, not the organization: they are false when the server cannot offer two-factor or file storage.
Autorizações
A staff session token, uk_st_…. Minted by sign-up, sign-in or the two-factor exchange.
Cabeçalhos
The organization the caller is acting on — the org_… code that appears in the panel URL. It identifies; the membership JOIN is what authorizes, so a forged code reads nothing. Absent, the session's default organization answers.
Resposta
The session.
A fine-grained capability. The catalogue lives in Go; which role holds which lives in the database.
organization:update, organization:delete, members:read, members:write, roles:read, roles:manage, api_keys:read, api_keys:write, customers:read, customers:write A platform capability, not the organization's.
A platform capability, not the organization's.