SUsurrealdb

POST /api/v1/{context_id}/principals/{principal_id}/grants

Changed on

Grant a scope pattern to a principal for the given verbs (requires grant:manage over the pattern)

Request

Path parameters

context_idstring required

Spectron context id

principal_idstring required

Principal record-id key

Request body

pathstring required

A scope pattern: an exact node (org/apple/product/ipad) or a subtree (org/apple/* / /*). A leading / is optional (/org/apple denotes the same node as org/apple); patterns are returned in the canonical form, without it.

verbsVerb[] required

Grant verbs to apply: any of memory:read|memory:write|memory:forget| scope:read|scope:create|scope:delete|grant:manage.

Response

Updated principal

displayNamestring required

Human-readable display name.

grantsGrants required

Per-verb scope pattern map. Keys are grant verbs in <noun>:<verb> form (memory:read, memory:write, memory:forget, scope:read, scope:create, scope:delete, grant:manage); values are arrays of scope patterns.

idstring required

Record-id key (e.g. alpha-bot).

kindstring required

Identity kind: human / agent / service / unknown.

Changes