sections: authentication:permissioncheckview
This data as json
| id | page | ref | title | content | breadcrumbs | references |
|---|---|---|---|---|---|---|
| authentication:permissioncheckview | authentication | permissioncheckview | Permission check view | The /-/check endpoint evaluates and explains a single actor, action and resource decision. The explanation includes: Every matching allow and deny rule, with its source and reason. The winning resource, parent or global scope. Rules ignored because a more specific rule matched, or because a deny won at the same scope. Actor restriction allowlists that included or excluded the resource. Additional actions required by the requested action. An explicit default-deny explanation when no rule matched. This endpoint provides an interactive HTML form interface. Add .json to the URL path (e.g. /-/check.json?action=view-instance ) to get the raw JSON response instead. Pass ?action= to specify the action to check, and optional ?parent= and ?child= parameters to specify the resource. The interactive form also accepts actor JSON, allowing a hypothetical actor to be tested without signing in as that actor. The JSON endpoint accepts the same value using the actor query string parameter. Use actor=null to represent an anonymous actor. This endpoint requires the permissions-debug permission. The hypothetical actor is used only for the decision being explained; access to the debug tool is checked against the actor who is actually signed in. | ["Authentication and permissions", "Permissions debug tools"] | [] |