API reference
POSTRequires Bearer token
Grant a permission
/api/edm/permissions
Exactly one of folder_id or document_id. Rights: can_read (default true), can_download, can_deposit, can_delete, can_manage (default false). A company admin has full access in their organisation.
Path parameters
This endpoint has no path parameters.
Query parameters
This endpoint has no query parameters.
Request body
| Field | Type | Description |
|---|---|---|
subject_type Required | string | role or user.e.g. "role" |
subject_id Required | string | Role name or user id. e.g. "manager" |
folder_id | string | Target folder (xor document_id). |
document_id | string | Target document (xor folder_id). |
can_read | boolean | Default true. e.g. true |
can_download | boolean | Default false. e.g. true |
can_deposit | boolean | Default false. e.g. false |
can_delete | boolean | Default false. e.g. false |
can_manage | boolean | Default false. e.g. false |
Responses
| Status | Meaning |
|---|---|
| 201 | Permission created |
| 401 | Missing or invalid Bearer token. |