home / docs / sections

Menu

sections: authentication:permissioncheckview

This data as json

id page ref title content breadcrumbs references
authentication:permissioncheckview authentication permissioncheckview Permission check view The /-/check endpoint evaluates and explains a single actor, action and resource decision. The explanation includes: Every matching allow and deny rule, with its source and reason. The winning resource, parent or global scope. Rules ignored because a more specific rule matched, or because a deny won at the same scope. Actor restriction allowlists that included or excluded the resource. Additional actions required by the requested action. An explicit default-deny explanation when no rule matched. This endpoint provides an interactive HTML form interface. Add .json to the URL path (e.g. /-/check.json?action=view-instance ) to get the raw JSON response instead. Pass ?action= to specify the action to check, and optional ?parent= and ?child= parameters to specify the resource. The interactive form also accepts actor JSON, allowing a hypothetical actor to be tested without signing in as that actor. The JSON endpoint accepts the same value using the actor query string parameter. Use actor=null to represent an anonymous actor. This endpoint requires the permissions-debug permission. The hypothetical actor is used only for the decision being explained; access to the debug tool is checked against the actor who is actually signed in. ["Authentication and permissions", "Permissions debug tools"] []
Powered by Datasette · Queries took 2.725ms