Role-Based Access Control (RBAC)
How to implement granular permissions for public, operator, and authority data.
The Three-Tiered Data Model
The Battery Passport data is strictly divided into three access levels to balance public transparency with corporate intellectual property protection.
| Access Level | Who Gets Access? | Example Data Attributes |
|---|---|---|
| Public | Consumers, general public. No authentication required. | Carbon footprint, overall recycled content, manufacturer ID. |
| Restricted (Operators) | Certified dismantlers, repair shops, recyclers. | Detailed teardown manuals, exact cell chemistry breakdown, state of health (SoH) metrics. |
| Authorities | Market Surveillance Authorities, Notified Bodies. | Test reports, full conformity assessment documents. |
Technical Implementation (eIDAS)
To authenticate a user as a "certified recycler," the system will likely rely on the European eIDAS framework, allowing digital wallets to present verifiable credentials to the passport API before restricted JSON data is returned.