Glossary

Key terms and concepts used in Eden-MDBS.

A

Access Level

A legacy compatibility label derived from a control-plane permission set. New

RBAC APIs use explicit control-plane bits instead of hierarchical runtime

tiers.

Admin

A legacy compatibility label roughly corresponding to a broad control-plane

permission set. The authoritative model is now explicit control-plane bits.

B

Basic Auth

HTTP Basic Authentication used for the login endpoint. Credentials are Base64-encoded in the format username:password.

Bearer Token

The JWT token included in the Authorization header for authenticated API requests. Format: Authorization: Bearer .

E

Endpoint

A managed connection to an external database or service. Endpoints abstract connection details, handle pooling, and integrate with RBAC.

Endpoint Kind

The type of database or service an endpoint connects to (e.g., Postgres, Mongo, Redis, Http).

H

Handlebars

The templating syntax used in Eden templates for parameter substitution. Uses double curly braces: {{parameter}}.

I

IAM (Identity and Access Management)

The system for managing users and their permissions within an organization.

Control Plane

The authorization plane that governs who can configure Eden resources.

Control-plane permissions use the uppercase bits R, C, P, G, D,

and A.

J

JWT (JSON Web Token)

The token format used for authentication. Contains user and organization identifiers along with expiration time.

O

Organization

The top-level multi-tenant container in Eden. Organizations provide complete isolation between different customer environments. All users, endpoints, templates, and workflows belong to an organization.

P

Parameterized Query

A query that uses placeholders for values instead of embedding them directly. Prevents SQL injection. Example: SELECT * FROM users WHERE id = $1.

R

RBAC (Role-Based Access Control)

The permission system that controls who can configure resources in Eden.

Control-plane permissions can be granted at the organization or resource

level.

Read

A legacy compatibility label. In the new control-plane model, viewing config

is represented by the R bit.

S

Subject

In RBAC context, an entity (user) that can be granted permissions on a resource.

SuperAdmin

A legacy compatibility label. In the new control-plane model, destructive

operations are represented explicitly by the D bit rather than by a special

tier.

T

Template

A reusable, parameterized operation definition. Templates define database queries or API calls that can be executed with different parameters.

Transaction

A group of database operations executed atomically - either all succeed or all are rolled back.

U

UUID (Universally Unique Identifier)

A 128-bit identifier used for resources in Eden. Format: 550e8400-e29b-41d4-a716-446655440000.

W

Workflow

A multi-step operation that orchestrates multiple templates or actions. Workflows enable complex data pipelines with conditional logic.

Write

A legacy compatibility label. In the new control-plane model, configuration

changes are represented by explicit bits such as C, P, and G.

Control-Plane Permission Bits

Data Plane

The runtime authorization plane that governs what operations a caller can

execute against an endpoint. Shared-mode data-plane permissions use lowercase

r, w, and x; ELS mode delegates runtime enforcement to the target

system using the caller's injected credentials.

Endpoint Types

HTTP Status Codes

API Base URL

http://{host}:8000/api/v1/

All API endpoints are prefixed with this base URL.