Skip to content

docs: clarify observed API behaviours (rights inheritance, formulas, properties, auth) - #11

Open
mitselek wants to merge 1 commit into
mainfrom
docs/api-behaviour-clarifications
Open

docs: clarify observed API behaviours (rights inheritance, formulas, properties, auth)#11
mitselek wants to merge 1 commit into
mainfrom
docs/api-behaviour-clarifications

Conversation

@mitselek

@mitselek mitselek commented Jun 6, 2026

Copy link
Copy Markdown
Collaborator

Documents several Entu API/platform behaviours that we (the team behind mvox, an Entu-backed app) verified empirically against a live database while building on Entu, but which were not yet covered in the docs. Each addition maps to an open issue with probe results, listed below so this single merge closes them.

Pure markdown additions in src/ (English) using the existing ::: admonition style. We deliberately left the Estonian src/et/ mirror untouched — happy to follow up with translations, but the wording is yours to finalise first.

What is documented

Area Addition Issue
Entities "What propagates between entities" (type↔instance vs parent↔child) #10
Entities Multi-parent rights = union, materialised, eventually consistent, inherited flag #2
Formulas Single-hop references only #4
Formulas Output is always a scalar, never a reference #8
Formulas Evaluator bypasses access rights (safe for aggregates, not raw projection) #9
Formulas CONCAT_WS partial/duplicate-input behaviour #3
Properties Last-_owner guard is direct-delete only #6
Authentication Add-a-login-method (invite self-link) flow #7
Entity Types reference_query is a static filter #5

Notes

  • These behaviours were observed against a live Entu deployment; we have phrased them as observations and would welcome correction on anything that is deployment-specific rather than universal.
  • A couple touch security-relevant behaviour (formula rights bypass, last-owner guard) — flagged as warnings so integrators design around them.

Closes #2
Closes #3
Closes #4
Closes #5
Closes #6
Closes #7
Closes #8
Closes #9
Closes #10

…ies, auth)

Documents several Entu API/platform behaviours that an external integrator
(the mvox project) verified empirically against a live database but which
weren't yet covered in the docs. Each addition corresponds to an open issue
with probe results.

- entities: a 'what propagates between entities' section (type↔instance vs
  parent↔child); multi-parent rights are a union, materialised, eventually
  consistent, and carry an 'inherited' flag.
- formulas: single-hop references only; output is always a scalar (never a
  reference); evaluator bypasses access rights (safe for aggregates, not raw
  projection); CONCAT_WS partial/duplicate-input behaviour.
- properties: the last-_owner guard is direct-delete only.
- authentication: add-a-login-method (invite self-link) flow.
- entity-types: reference_query is a static filter (no per-instance substitution).

English (src/) only — leaving the Estonian (src/et/) mirror to maintainers.

Co-authored-by: Mihkel Putrinš <mihkel.putrinsh@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment