Decisions

Obtain an authorization decision

Determines whether a specified principal is authorized to perform a specified action in a specified context. The response is either true (the action is authorized) or false (the action is not authorized).

post/decisions

Request

  • Base URL: http://example.com/authorization
  • URL: http://example.com/authorization/decisions
  • Auth: none declared

Request body

permission'add' | 'create' | 'delete' | 'read' | 'remove' | 'secure' | 'update'

A type of access.

parametersobject

A map of keys to objects that represent the parameters and return object of a method being invoked. This can be null or empty.

matchParamsboolean

Whether the authorization service should strictly match query parameters in this context against a rule.

eachNamedobject

Map of parameter names to a new name that should be used in rule condition evaluation for collections. For example, if a parameter being used for evaluation is a collection named 'items', then eachNamed can map 'items' to 'item' so that item in the collection can be evaluated independently against a rule that references the '#item' variable.

versioninteger

The authorization context's media type version. The version described here is version 1.

Response

Always returned if the request is successful and the request's Accept header is application/vnd.sas.authorization.direct.decision+json. However, if the Accept header is application/json or application/vnd.sas.authorization.direct.decision+json, 200 is returned only if the request is successful and the decision is true.

boolean required

Changes

No recorded changes to this operation across all 1 revision of this API.