domains

Add Member

Add a person, an agent or an organization to a folder. Admin-only.

The principal may be an ORGANIZATION (TOS-4113 Lane C). An organization is an identity whose id is its tenant id, so the row this writes needs no new shape, and services/access/domain_reach carries every active member of that organization into this folder at the granted role.

Two conditions, and the second is the new one:

  • the caller is a direct admin of this folder, exactly as for a person;
  • when the principal is an organization, the caller either belongs to it or it has opted into the directory. See :func:_may_grant_to_organization.

The second condition exists because an organization identity is deliberately unfindable by ordinary means (migration 1066 mints it with discoverable_by_username and discoverable_by_email both false), so "anyone active" (the rule for a person) would authorize handing a company the contents of a folder by pasting a UUID, with no surface that could have shown the admin whose company it was. The two conditions are exactly the two ways an organization can legitimately be on a caller's screen: GET /api/me/organizations and the directory.

post/api/folders/{domain_ref}/members

Request

  • Base URL: https://app.thinqos.com (the document declares no server; this is the origin it was published from)
  • URL: https://app.thinqos.com/api/folders/{domain_ref}/members
  • Auth: none declared

Path parameters

domain_refstring required

Headers

x-impersonate-identity-idstring nullable

Request body

identity_idstring uuid required
rolestring required

Response

Successful Response

idstring uuid required
library_idstring uuid required
identity_idstring uuid required
identity_display_namestring required
identity_emailstring nullable required
identity_avatar_urlstring nullable required
identity_kindstring required
rolestring required
trust_modestring required
is_activeboolean required
learns_from_libraryboolean required
learned_document_countinteger required
created_atstring date-time required
updated_atstring date-time required

Changes

No recorded changes to this operation across all 1 revision of this API.