---
title: "Update a Permission"
method: PATCH
path: "/permissions/{id}"
tags: ["Permissions"]
---

# Update a Permission

`PATCH /permissions/{id}`

Update an existing permission

## Path parameters

- `id` integer, required

## Query parameters

- `meta` string

## Request body

- object
  - `collection` object — What collection this permission applies to.
  - `comment` 'none' | 'create' | 'update' — If the user can post comments. `full`.
  - `create` 'none' | 'full' — If the user can create items.
  - `delete` 'none' | 'mine' | 'role' | 'full' — If the user can update items.
  - `explain` 'none' | 'create' | 'update' | 'always' — If the user is required to leave a comment explaining what was changed.
  - `read` 'none' | 'mine' | 'role' | 'full' — If the user can read items.
  - `read_field_blacklist` object — Explicitly denies read access for specific fields.
  - `role` object — Unique identifier of the role this permission applies to.
  - `status` object — What status this permission applies to.
  - `status_blacklist` object — Explicitly denies specific statuses to be used.
  - `update` 'none' | 'mine' | 'role' | 'full' — If the user can update items.
  - `write_field_blacklist` object — Explicitly denies write access for specific fields.

## Response `200`

Successful request

- object
  - `data` Permissions
    - `id` integer — Unique identifier for the permission.
    - `collection` string — What collection this permission applies to.
    - `action` 'create' | 'read' | 'update' | 'delete' — What action this permission applies to.
    - `permissions` object, nullable — JSON structure containing the permissions checks for this permission.
    - `validation` object, nullable — JSON structure containing the validation checks for this permission.
    - `presets` object, nullable — JSON structure containing the preset value for created/updated items.
    - `fields` string[], nullable — CSV of fields that the user is allowed to interact with.
    - `policy` unknown

## Other responses

- `401` — Error: Unauthorized request
- `404` — Error: Not found.

---

[API](https://skmtc.dev/utomic-media/apis/dynamic-api-specification.md) · [All operations](https://skmtc.dev/utomic-media/apis/dynamic-api-specification/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/utomic-media/dynamic-api-specification/revisions/4a0ccd34700e/schema)