{
  "name": "RBAC Permission",
  "description": "Structure documentation for an RBAC permission object — a discrete authorization to perform an action on a resource.",
  "fields": [
    {
      "name": "id",
      "type": "string",
      "required": true,
      "description": "Unique identifier for the permission."
    },
    {
      "name": "name",
      "type": "string",
      "required": false,
      "description": "Human-readable name of the permission."
    },
    {
      "name": "description",
      "type": "string",
      "required": false,
      "description": "Description of what this permission allows."
    },
    {
      "name": "action",
      "type": "string",
      "required": true,
      "description": "The action being permitted — e.g., read, write, delete, execute."
    },
    {
      "name": "resource",
      "type": "string",
      "required": true,
      "description": "The resource or resource type the action applies to."
    },
    {
      "name": "conditions",
      "type": "object",
      "required": false,
      "description": "Optional attribute-based conditions (ABAC extension) that must be satisfied for the permission to apply."
    }
  ]
}