# `policy.effect_unknown`

Policy holds something that isn't a grant or a setting.

Area 9, [Policy](../topics/policy.md); not declinable; the next step is usually the agent's.

A policy grants `create`, `read`, `update` and `delete`; an action needing other people is listed under `actions:`:

```jadpo
type Handle = Text {
    max_length: 40
}

entity User {
    id: Uuid
    handle: Handle {
        unique: true
    }
}

principal {
    user: {
        subject: User.handle
    }
}

entity Note {
    id: Uuid
    owner_id: User.id {
        on_delete: OnDelete.cascade
    }

    policy: {
        publish: [owner_id]
    }
}
```

```text
error: `publish` isn't something a policy grants
 --> main.jadpo:25:9
   |
25 |         publish: [owner_id]
   |         ^^^^^^^ not a grant or a setting
  reason: An entity's `policy:` lists who may `create`, `read`, `update` and `delete` its records, and may say which `tenant:` they belong to. Every action takes its permission from these; one that needs others is listed under `actions:` in `policy.jadpo`.
  next: Remove `publish` (agent)
  rule: policy.effect_unknown
  help: https://jadpo.dev/docs/errors/policy.effect_unknown

check failed: 1 error, 1 file
```