Full resource path to test against the role's constraints.
Role to evaluate for access on the given resource path.
Lookup helper used to resolve child roles by id.
OptionaldacRoleCache: Record<string, DACRole>Optional cache to reuse resolved roles across calls.
Allow/deny summary for the resource path.
Get the access to a given resource for a given DAC role.