DataAccess

Check if a role may read/write a field path

Auth: read on project_id. Evaluates FAP for hypothetical role/bitmap.

post/api/data-access/check

Request

  • Base URL: https://api.agentstack.tech (the document declares no server; this is the origin it was published from)
  • URL: https://api.agentstack.tech/api/data-access/check
  • Auth: one of:
    • API key in header X-API-Key
    • HTTP bearer

Query parameters

project_idinteger required

Project ID

Headers

Idempotency-Keystring

Client-generated key to make mutating requests idempotent.

Request body

field_pathstring required

Dot path: 'resource.field' (e.g., 'orders.profit_margin')

user_rolestring required

Role to test

permissionstring

'read' or 'write'

permissions_bitmapinteger

Bitmap from session/JWT

user_idinteger

User ID (0 = anonymous)

resource_owner_idinteger nullable

Owner ID for 'owner' descriptor evaluation

Response

{ allowed, field_path, ... }

unknown required

Changes

No recorded changes to this operation across all 1 revision of this API.