---
title: "Access Evaluation AuthZEN"
method: POST
path: "/evaluation"
tags: ["Access Evaluation"]
---

# Access Evaluation AuthZEN

`POST /evaluation`

Evaluates whether a subject is authorized to perform a specific action on a resource.

## Request body

- object
  - `subject` Subject, required
    - `type` string, required — Type of the subject (e.g., user, service)
    - `id` string, required — Unique identifier of the subject
    - `properties` object — Additional attributes of the subject
  - `action` Action, required
    - `name` string, required — Name of the action (e.g., read, write)
    - `properties` object — Additional attributes of the action
  - `resource` Resource, required
    - `type` string, required — Type of the resource (e.g., document, database)
    - `id` string, required — Unique identifier of the resource
    - `properties` object — Additional attributes of the resource
  - `context` Context — Environmental or contextual attributes for the request

## Response `200`

Access evaluation result

- EvaluationResponse
  - `decision` boolean, required — Result of the access evaluation (true for allow, false for deny)
  - `context` Context — Environmental or contextual attributes for the request

## Other responses

- `400` — Invalid request
- `500` — Internal server error

## Changes

- **2024-11-20** `edda838bf175` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/janssenproject/apis/janssen-authorization-server/changes/evaluation/post.md)

---

[API](https://skmtc.dev/janssenproject/apis/janssen-authorization-server.md) · [All operations](https://skmtc.dev/janssenproject/apis/janssen-authorization-server/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/janssenproject/janssen-authorization-server/revisions/1620ec4b4e5f/schema)