Sign in
User

Summarize the authenticated user's roles and permissions

Changed on

Auth-only permission summary for UI hints. Skips requirePermission so a signed-in user with no roles receives 200 and an empty permissions list. roles lists only the roles granted directly by group membership (a FULL user is ["FULL"], not READ and WRITE). permissions is the effective union, including inheritance. Group emails are omitted. The API still enforces permissions on each data route.

get/user/permissions

Request

  • Base URL: https://sshf-api-330507742215.us-central1.run.app
  • URL: https://sshf-api-330507742215.us-central1.run.app/user/permissions
  • Auth: OAuth 2 (implicit, authorization URL https://accounts.google.com/o/oauth2/v2/auth)

Response

Effective roles and permissions for the signed-in user

emailstring required

Authenticated account, for display and support

hasAccessboolean required

True when permissions is non-empty

rolesstring[] required

Role ids granted directly by group membership. Inherited roles are not listed.

permissionsstring[] required

Effective permission union, including permissions inherited from WRITE and FULL

evaluatedAtstring date-time required

When membership was resolved (cache fill time)

expiresAtstring date-time required

When the server-side cache entry expires

Changes