List projects where the user holds a permission

GET

/api/v1/rbac/permission/{permission}/projects

const url = 'https://localhost:8080/api/v1/rbac/permission/example/projects';
const options = {method: 'GET', headers: {Authorization: '<Authorization>'}};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}

curl --request GET \
  --url https://localhost:8080/api/v1/rbac/permission/example/projects \
  --header 'Authorization: <Authorization>'

Return every project in the caller’s organization where the authenticated principal holds the given permission, honoring API-key scopes and project binding. An empty list is a valid answer; like the check endpoints, an unknown permission is one nobody holds

Authorizations

BearerAuth
ApiKeyAuth

Parameters

Path Parameters

permission

required

string

Permission name

Responses

200

Projects where the permission holds

application/json

Projects in the caller’s organization where the permission holds; empty when it holds nowhere

object

permission

string

projects

Array<object>

A project’s integer id and public UUID

object

integer

uuid

string

Example

{
  "permission": "view_project_data",
  "projects": [
    {
      "id": 15,
      "uuid": "fd47f68b-8760-4d0d-94fa-7658924acb25"
    }
  ]
}

401

Unauthorized - Authentication required

application/json

Error body returned across the auth endpoints; the message is human-readable and not a stable identifier

object

error

string

error_description

string

Example

{
  "error": "Unauthorized",
  "error_description": "Invalid token"
}

500

Project lookup failed

application/json

Error body returned across the auth endpoints; the message is human-readable and not a stable identifier

object

error

string

error_description

string

Example

{
  "error": "Unauthorized",
  "error_description": "Invalid token"
}