namespace KBX.Shared.Authorization;

public interface IKbxPermissionEvaluator
{
    bool Has(string permission);
    bool HasAll(params string[] permissions);
}

public sealed record KbxSensitiveDisclosure(
    Guid TenantId,
    Guid UserId,
    string PolicyId,
    string EntityType,
    string EntityId,
    IReadOnlyList<string> Fields,
    string? Reason,
    string CorrelationId);