Grant a permission on a collection to a principal

POST

/collections/{id}/acls

• Local development behind nginx (port 8088 by default)

Inserts one ACL row. Requires write access to the collection (owner / collections.admin / system.admin).

Authorizations

• cookieAuth
• bearerAuth

Parameters

Path Parameters

id

required

string format: uuid

Request Body ^required

object

principal_type

required

string

Allowed values: user role team

principal_id

required

string

<= 64 characters

permission

required

string

Allowed values: read write admin

expires_at

string format: date-time

nullable

Responses

204

ACL row added

400

Malformed request

object

error

required

Human-readable error summary

string

Example

the request could not be completed

401

Authentication required, missing, or invalid

object

error

required

Human-readable error summary

string

Example

the request could not be completed

Example

{
  "error": "authentication required: sign in and retry with a valid session or API token"
}

403

Authenticated but missing required capabilities

object

error

required

Human-readable error summary

string

Example

the request could not be completed

404

Resource not found

object

error

required

Human-readable error summary

string

Example

the request could not be completed