---
title: "Check if objects have required permission"
method: POST
path: "/v1/acl/"
---

# Check if objects have required permission

`POST /v1/acl/`

## Request

- Base URL: `https://app.iconik.io/API/acls`
- URL: `https://app.iconik.io/API/acls/v1/acl/`
- Auth: none declared. Required headers: `App-ID`, `Auth-Token`
- TypeScript: <https://skmtc.dev/iconik/apis/iconik-acls/docs/v1/acl/post.ts> (a function with typed inputs; its response is checked against the schema)

Required roles:
 - can_read_acls

## Headers

- `App-ID` string, required
- `Auth-Token` string, required

## Request body

- CheckBulkACLsSchema
  - `objects` BulkACLsObjectSchema[], required: The number of objects in the list is limited to a minimum of 0 and a maximum of 500
    - `object_keys` string[], required
    - `object_type` string, required
    - `permissions` string[], required

## Response `200`

Returns a dict with two lists `access_granted` and `access_denied` object keys

- BulkACLSchema
  - `access_denied` string[]
  - `access_granted` string[]

## Other responses

- `400`: Bad request
- `401`: Token is invalid
- `403`: User doesn't have permission
- `default`: Error response

---

[API](https://skmtc.dev/iconik/apis/iconik-acls.md) - [All operations](https://skmtc.dev/iconik/apis/iconik-acls/llms.txt) - [OpenAPI document](https://skmtc.dev/iconik/apis/iconik-acls/revisions/2803af0246a2?raw)