---
title: "Check permission"
method: POST
path: "/api/v3/directory/check/permission"
tags: ["directory"]
deprecated: true
---

# Check permission

`POST /api/v3/directory/check/permission`

## Request

- The document declares no server URL.
- Auth: API key in header `authorization` and API key in header `aserto-tenant-id`
- TypeScript: <https://skmtc.dev/aserto/apis/openid-authzen-access-service/docs/api/v3/directory/check/permission/post.ts> (a function with typed inputs; its response is checked against the schema)

> **Deprecated.**

Returns check permission outcome.

## Request body

- V3CheckPermissionRequest
  - `object_id` string, required
  - `object_type` string, required
  - `permission` string, required
  - `subject_id` string, required
  - `subject_type` string, required
  - `trace` boolean

## Response `200`

A successful response.

- V3CheckPermissionResponse
  - `check` boolean
  - `trace` string[]

## Other responses

- `default`: An unexpected error response.

## Changes

- **2025-02-28** `d9e7ddfd0975`: 1 info
  - endpoint deprecated
- **2025-02-17** `fddc0bd34946`: 1 info
  - api operation id `directory.v3.check.permission` removed and replaced with `directory.reader.v3.check.permission`
- **2023-10-31** `68bcc990c27a`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/aserto/apis/openid-authzen-access-service/changes/api/v3/directory/check/permission/post.md)

---

[API](https://skmtc.dev/aserto/apis/openid-authzen-access-service.md) - [All operations](https://skmtc.dev/aserto/apis/openid-authzen-access-service/llms.txt) - [OpenAPI document](https://skmtc.dev/aserto/apis/openid-authzen-access-service/revisions/5dd53d1e6d2e?raw)