---
title: "Get file ACL"
method: GET
path: "/storage/files/acl"
tags: ["Storage"]
---

# Get file ACL

`GET /storage/files/acl`

Returns the Access Control List currently applied to a fal CDN file.

The ACL consists of a default decision (`allow`, `forbid`, or `hide`) plus
optional per-user rules that override the default. Rule users are returned as
nicknames where possible.

**Authentication:** Required. The API key must have the `assets:read` permission.

## Query parameters

- `url` string, uri, required — Full URL of the fal CDN file, as returned by the upload APIs (https://v3.fal.media/files/b/<id>/<filename>). Must not contain query parameters.

## Response `200`

Current ACL of the file

- object — Access Control List currently applied to the file
  - `default` 'allow' | 'forbid' | 'hide', required — Fallback decision when no user-specific rule matches
  - `rules` object[], required — User-specific overrides to the default decision. Users are returned as nicknames where possible.
    - `user` string, required — User nickname or user ID the rule applies to
    - `decision` 'allow' | 'forbid' | 'hide', required — Access decision applied to this user

## Other responses

- `400` — Invalid request parameters
- `401` — Authentication required
- `403` — Access denied
- `404` — Resource not found
- `429` — Rate limit exceeded
- `500` — Internal server error

---

[API](https://skmtc.dev/fal/apis/platform-apis.md) · [All operations](https://skmtc.dev/fal/apis/platform-apis/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/fal/platform-apis/revisions/0c7dabf80b00/schema)