Grant a permission on a post to a principal

POST

/posts/{id}/acls

• Local development behind nginx (port 8088 by default)

Inserts one ACL row. The same principal can hold multiple permission levels (e.g. read AND write) — that’s two POSTs. Requires write access to the post (owner / posts.admin / system.admin) so a contributor can’t grant access beyond their own ability to mutate.

Authorizations

• cookieAuth
• bearerAuth

Parameters

Path Parameters

id

required

string format: uuid

Request Body ^required

object

principal_type

required

string

Allowed values: user role team

principal_id

required

string

<= 64 characters

permission

required

string

Allowed values: read write admin

expires_at

string format: date-time

nullable

Responses

204

ACL row added

400

Malformed request

object

error

required

Human-readable error summary

string

Example

the request could not be completed

401

Authentication required, missing, or invalid

object

error

required

Human-readable error summary

string

Example

the request could not be completed

Example

{
  "error": "authentication required: sign in and retry with a valid session or API token"
}

403

Authenticated but missing required capabilities

object

error

required

Human-readable error summary

string

Example

the request could not be completed

404

Resource not found

object

error

required

Human-readable error summary

string

Example

the request could not be completed