MUmultigest
Permissions

Add permission to user

Add a single user-level permission to a user.

Privileged-grant policy (2026-08-13, see app/db/permissions.py): the guard moved from "refuse every NEVER_ASSIGNABLE name" to the same split app/db/admin.py already applies to roles — system_admin refused outright, admin/view_all_pvs allowed with an EXPLICIT grant_privileged_role and audited in the write's own transaction. The check itself runs in the DB layer, inside that transaction: doing it up here would leave a check-then-write race.

post/api/users/{user_id}/permissions

Request

  • Base URL
    https://api.multigest.pt (the document declares no server; this is the origin it was published from)
  • URL
    https://api.multigest.pt/api/users/{user_id}/permissions
  • Auth
    API key in header x-api-token and API key in header x-origin-verify

Path parameters

user_idinteger required

Headers

x-api-tokenstring nullable

Request body

permission_idinteger required
grant_privileged_roleboolean

Response

Successful Response

unknown required

Changes

No recorded changes to this operation across all 21 revisions of this API.