Skip to content
Artist Alley

Grant a permission on an asset_type to a principal

POST
/asset_types/{ref}/acls

Inserts one ACL row. Re-granting the same tuple refreshes granted_at / granted_by / expires_at — idempotent. The first row inserted flips the type from “open” to “restricted” for non-admin callers.

Authorizations

Section titled “Authorizations ”

Parameters

Section titled “ Parameters ”

Path Parameters

Section titled “Path Parameters ”
ref
required
integer format: int64

Request Body required

Section titled “Request Body required ”
object
principal_type
required
string
Allowed values: user role team
principal_id
required
string
<= 64 characters
permission
required
string
Allowed values: read write admin
expires_at
string format: date-time
nullable

Responses

Section titled “ Responses ”

204

Section titled “204 ”

ACL row added.

400

Section titled “400 ”

Malformed request

object
error
required

Human-readable error summary

string
Example
the request could not be completed

401

Section titled “401 ”

Authentication required, missing, or invalid

object
error
required

Human-readable error summary

string
Example
the request could not be completed
Example
{
  "error": "authentication required: sign in and retry with a valid session or API token"
}

403

Section titled “403 ”

Authenticated but missing required capabilities

object
error
required

Human-readable error summary

string
Example
the request could not be completed

404

Section titled “404 ”

Resource not found

object
error
required

Human-readable error summary

string
Example
the request could not be completed