access
Atomically change a person's access rule card.
Changed onAuthorizes every removal and addition against the original access, then commits the complete change in one transaction. All rows must belong to the named person. Each create[].principal must equal the top-level principal. At least one revoke or create item is required. A missing removal refuses the whole batch. Sessions are invalidated only after all authorization checks succeed.
post/api/v1/orgs/{org}/rules/replace
Request
- Base URL: / (relative, and the document was published on a file host, not at the API’s origin)
- URL: /api/v1/orgs/{org}/rules/replace
- Auth: HTTP bearer
Request body
Response
Newly created rules. An empty list means removal only.
Changes
- info
endpoint added
- info