Permission Spec

Permissions control access to stream which is not public.

Schema

{
  "type": "permission",
  "created": <string: utc format parseable date string>,
  "modified": <string: utc format parseable date string,
  "createdBy": <string>,
  "streamId": <string>,
  "userId": <string>,
  "level": 0
}

level: the following levels determine the user’s access to a stream.

0 - joinable  (can subscribe to the stream)
1 - readable  (can read the stream)
2 - writeable (can post to the stream)
3 - adminable (can invite others to the stream)
4 - owner     (can update properties of the stream 
               as well as well delete the stream if 
               there's no one else's content on it)

REST API

Permissions cannot be manipulated directly from the client.