id: markitect.documents.internal-read
name: Markitect internal document read
version: v1
status: draft
package: flexauth.markitect.documents
caring:
  profile: caring-0.4.0-rc2
  canonical_roles:
    - Doer
  organization_relations:
    - Customer
  scopes:
    - level: Resource
      id: document:internal-note
      tenant: tenant:alpha
  planes:
    - Data
  capabilities:
    - View
  exposure_modes:
    - Masked
    - Plaintext
  conditions:
    - PurposeBound
    - Logged
  restrictions:
    - ExportBlocked
metadata:
  source: examples/caring