Revoke a specific permission row from a principal

DELETE

/asset_types/{ref}/acls/{principal_type}/{principal_id}/{permission}

• Local development behind nginx (port 8088 by default)

Removes the exact (principal_type, principal_id, permission) tuple. Other permission levels for the same principal stay intact. Removing the last row on a type flips it back to “open” for every caller. 404 if the row doesn’t exist.

Authorizations

• cookieAuth
• bearerAuth

Parameters

Path Parameters

ref

required

integer format: int64

principal_type

required

string

Allowed values: user role team

principal_id

required

string

<= 64 characters

permission

required

string

Allowed values: read write admin

Responses

204

Removed.

401

Authentication required, missing, or invalid

object

error

required

Human-readable error summary

string

Example

the request could not be completed

Example

{
  "error": "authentication required: sign in and retry with a valid session or API token"
}

403

Authenticated but missing required capabilities

object

error

required

Human-readable error summary

string

Example

the request could not be completed

404

Resource not found

object

error

required

Human-readable error summary

string

Example

the request could not be completed