Permission

The permission endpoint answers what the calling user is allowed to do, so a client can decide what to offer before trying it.

Check what the caller may do

post

Asks whether the caller may perform given actions, several at once. Each request names a domain, a resource and an action; the answer repeats them with allowed next to each, in the same order.

This does not perform anything — it only reports the decision the API would make.

Authorizations

AuthorizationstringRequired

Token issued by the central equipme authentication, sent as Bearer <token>.

Body

objectOptional

or

Responses

200

OK

application/json

400

Bad Request

application/json

401

Unauthorized

application/json

403

Forbidden

application/json

500

Internal Server Error

application/json

post/v1/permissions/check

POST /api/v1/permissions/check HTTP/1.1
Authorization: Bearer YOUR_SECRET_TOKEN
Content-Type: application/json
Accept: */*
Content-Length: 2

{}

{
  "data": [
    {
      "action": "",
      "allowed": true,
      "domain": "text",
      "resource": "text"
    }
  ]
}