Access control

An intended action becomes an authorized call through a sequence of execution paths and permission checks. Inspect an account’s permissions, limit each process’s scope, or transfer those scopes as governance needs change. Start with Aragon OSx and the platform for how the app presents that authority, then read permissions and conditions for the protocol mechanics.

• Authorization and execution model — the generic caller, target, authorization, and execution model, including how broad execution capability can collapse finer authority.
• OSx authorization paths — a concrete reference for tracing plugin → DAO → target checks, permission tuples, ROOT administration, and the SPP callback route.
• Permission Viewer — the read-only app capability for inspecting an account's indexed OSx permission records in list and graph views.
• Scoped authority — the product rule for limiting each process at the account's execution boundary.
• Gradual permission handover — a pattern for moving explicit action scopes independently as governance needs change.