access

Atomically change a person's access rule card.

Changed on

Authorizes every removal and addition against the original access, then commits the complete change in one transaction. All rows must belong to the named person. Each create[].principal must equal the top-level principal. At least one revoke or create item is required. A missing removal refuses the whole batch. Sessions are invalidated only after all authorization checks succeed.

post/api/v1/orgs/{org}/rules/replace

Request

  • Base URL: / (relative, and the document was published on a file host, not at the API’s origin)
  • URL: /api/v1/orgs/{org}/rules/replace
  • Auth: HTTP bearer

Request body

OR

Response

Newly created rules. An empty list means removal only.

countinteger required

Total rows matching, which for an unpaged list equals items length.

Changes