Calculate permitted scopes.

POST

http://localhost:8080/api/v1/authorization/permitted-scopes

POST

/api/v1/authorization/permitted-scopes

curl -X POST http://localhost:8080/api/v1/authorization/permitted-scopes \
     -H "Authorization: Bearer <token>" \
     -H "Content-Type: application/json" \
     -d '{
  "resourceType": "department"
}'

{
  "create": {
    "system": false,
    "tenants": [
      "1"
    ],
    "clusters": [
      "a418ed33-9399-48c0-a890-122cadd13bfd"
    ],
    "departments": [
      "7"
    ],
    "projects": [
      "string"
    ]
  },
  "read": {
    "system": false,
    "tenants": [
      "1"
    ],
    "clusters": [
      "a418ed33-9399-48c0-a890-122cadd13bfd"
    ],
    "departments": [
      "7"
    ],
    "projects": [
      "string"
    ]
  },
  "update": {
    "system": false,
    "tenants": [
      "1"
    ],
    "clusters": [
      "a418ed33-9399-48c0-a890-122cadd13bfd"
    ],
    "departments": [
      "7"
    ],
    "projects": [
      "string"
    ]
  },
  "delete": {
    "system": false,
    "tenants": [
      "1"
    ],
    "clusters": [
      "a418ed33-9399-48c0-a890-122cadd13bfd"
    ],
    "departments": [
      "7"
    ],
    "projects": [
      "string"
    ]
  }
}

Use to calculate user permitted scopes for an action on a resource.

Authentication

AuthorizationBearer

Bearer authentication

Request

The request parameters.

resourceTypeenumRequired

Resource type enum for authorization.

Note: The ‘apps’ resource type is DEPRECATED. Please use ‘service-account’ instead for managing service accounts.

actionenum or nullOptional

Allowed values:

Response

Executed successfully.

createobject

readobject

updateobject

deleteobject

Errors

401

Unauthorized Error

500

Internal Server Error

503

Service Unavailable Error