---
title: "Check if a specific action is allowed on the given object"
method: POST
path: "/management/v1/permissions/check"
tags: ["permissions-openfga"]
---

# Check if a specific action is allowed on the given object

`POST /management/v1/permissions/check`

## Request

- Base URL: `https://localhost`
- URL: `https://localhost/management/v1/permissions/check`
- Auth: HTTP bearer
- TypeScript: <https://skmtc.dev/lakekeeper/apis/lakekeeper-management-api/docs/management/v1/permissions/check/post.ts> (a function with typed inputs; its response is checked against the schema)

## Request body

- CheckRequest: Check if a specific action is allowed on the given object
  - `identity` union: Identifies a user or a role
    - object: Id of the user
      - `user` string, required: Id of the user
    - object: Id of the role
      - `role` string, uuid, required: Id of the role
  - `operation` union, required: Represents an action on an object
    - object
      - `server` object, required
        - `action` 'create_project' | 'update_users' | 'delete_users' | 'list_users' | 'grant_admin' | 'provision_users' | 'read_assignments', required
    - object
      - `project` object, required
        - `action` 'create_warehouse' | 'delete' | 'rename' | 'list_warehouses' | 'create_role' | 'list_roles' | 'search_roles' | 'read_assignments' | 'grant_role_creator' | 'grant_create' | 'grant_describe' | 'grant_modify' | 'grant_select' | 'grant_project_admin' | 'grant_security_admin' | 'grant_data_admin' | 'get_endpoint_statistics', required
        - `project-id` string, uuid, nullable
    - object
      - `warehouse` object, required
        - `action` 'create_namespace' | 'delete' | 'modify_storage' | 'modify_storage_credential' | 'get_config' | 'get_metadata' | 'list_namespaces' | 'include_in_list' | 'deactivate' | 'activate' | 'rename' | 'list_deleted_tabulars' | 'read_assignments' | 'grant_create' | 'grant_describe' | 'grant_modify' | 'grant_select' | 'grant_pass_grants' | 'grant_manage_grants' | 'change_ownership' | 'get_all_tasks' | 'control_all_tasks' | 'set_protection' | 'set_format_version_policy' | 'get_endpoint_statistics', required
        - `warehouse-id` string, uuid, required
    - object
      - `namespace` union, required
        - object
          - `namespace-id` string, uuid, required
          - `warehouse-id` string, uuid, required
          - `action` 'create_table' | 'create_view' | 'create_generic_table' | 'create_namespace' | 'delete' | 'update_properties' | 'get_metadata' | 'read_assignments' | 'grant_create' | 'grant_describe' | 'grant_modify' | 'grant_select' | 'grant_pass_grants' | 'grant_manage_grants' | 'set_protection', required
        - object
          - `namespace` string[], required
          - `warehouse-id` string, uuid, required
          - `action` 'create_table' | 'create_view' | 'create_generic_table' | 'create_namespace' | 'delete' | 'update_properties' | 'get_metadata' | 'read_assignments' | 'grant_create' | 'grant_describe' | 'grant_modify' | 'grant_select' | 'grant_pass_grants' | 'grant_manage_grants' | 'set_protection', required
    - object
      - `table` union, required
        - object
          - `table-id` string, uuid, required
          - `warehouse-id` string, uuid, required
          - `action` 'drop' | 'write_data' | 'read_data' | 'get_metadata' | 'commit' | 'rename' | 'read_assignments' | 'grant_pass_grants' | 'grant_manage_grants' | 'grant_describe' | 'grant_select' | 'grant_modify' | 'change_ownership' | 'get_tasks' | 'control_tasks' | 'set_protection', required
        - object
          - `namespace` string[], required
          - `table` string, required: Name of the table, view, or generic table.
          - `warehouse-id` string, uuid, required
          - `action` 'drop' | 'write_data' | 'read_data' | 'get_metadata' | 'commit' | 'rename' | 'read_assignments' | 'grant_pass_grants' | 'grant_manage_grants' | 'grant_describe' | 'grant_select' | 'grant_modify' | 'change_ownership' | 'get_tasks' | 'control_tasks' | 'set_protection', required
    - object
      - `view` union, required
        - object
          - `table-id` string, uuid, required
          - `warehouse-id` string, uuid, required
          - `action` 'drop' | 'commit' | 'get_metadata' | 'select' | 'rename' | 'read_assignments' | 'grant_pass_grants' | 'grant_manage_grants' | 'grant_describe' | 'grant_select' | 'grant_modify' | 'change_ownership' | 'get_tasks' | 'control_tasks' | 'set_protection', required
        - object
          - `namespace` string[], required
          - `table` string, required: Name of the table, view, or generic table.
          - `warehouse-id` string, uuid, required
          - `action` 'drop' | 'commit' | 'get_metadata' | 'select' | 'rename' | 'read_assignments' | 'grant_pass_grants' | 'grant_manage_grants' | 'grant_describe' | 'grant_select' | 'grant_modify' | 'change_ownership' | 'get_tasks' | 'control_tasks' | 'set_protection', required
    - object
      - `generic-table` union, required
        - object
          - `table-id` string, uuid, required
          - `warehouse-id` string, uuid, required
          - `action` 'drop' | 'undrop' | 'write_data' | 'read_data' | 'get_metadata' | 'rename' | 'include_in_list' | 'get_tasks' | 'control_tasks' | 'set_protection' | 'read_assignments' | 'grant_pass_grants' | 'grant_manage_grants' | 'grant_describe' | 'grant_select' | 'grant_modify' | 'change_ownership', required
        - object
          - `namespace` string[], required
          - `table` string, required: Name of the table, view, or generic table.
          - `warehouse-id` string, uuid, required
          - `action` 'drop' | 'undrop' | 'write_data' | 'read_data' | 'get_metadata' | 'rename' | 'include_in_list' | 'get_tasks' | 'control_tasks' | 'set_protection' | 'read_assignments' | 'grant_pass_grants' | 'grant_manage_grants' | 'grant_describe' | 'grant_select' | 'grant_modify' | 'change_ownership', required

## Response `200`

- CheckResponse
  - `allowed` boolean, required: Whether the action is allowed.

---

[API](https://skmtc.dev/lakekeeper/apis/lakekeeper-management-api.md) - [All operations](https://skmtc.dev/lakekeeper/apis/lakekeeper-management-api/llms.txt) - [OpenAPI document](https://skmtc.dev/lakekeeper/apis/lakekeeper-management-api/revisions/c5cb9a12a98c?raw)