Permissions on Datanodes

General API Security and Permissions
, ,
1

Getting current permissions for a Datanode

It is possible to get the current permissions set on a Datanode by calling the folling:

GET /api/tenants/{{tenantId}}/resourcegroups/{{resourceGroupId}}/datanodes/{{datanodeId}}/permissions

See Get permissions for API information.

Property Type Description
referenceId string An Id that references the Datanode that the permissions are active for.
dataStoreId string (readonly) The Id of the datastore that contains the actual Datanode.
permissions Collection of Permission Model See Permission Model for more information.

Permission Model

The Permission Model contains information about a specific permission on the resource.

Property Type Description
id string (readonly) The Id of the specific permission. Can be used to remove the Permission.
permissionNamespace string The Namespace of any Security Permissions. Most common are: dk.realequity.permission.fullaccess or dk.realequity.permission.readaccess
referenceId string The Id of the Datanode that the permission is saved on.
contextNamespace string See Security Permissions for allowed Context Namespaces.
contextId string (nullable) The Id of the context.
handlerId string (nullable) This can be used to set a handlerId for the system or process that is administering the permission. If null, the permission is probably set by standard configuration or by a user from the B2B UI.

Removing permissions

The following endpoint can be called to remove permissions from a datanode:

DELETE /api/tenants/{tenantId}/resourcegroups/{resourceGroupId}/datanodes/{datanodeId}/permissions
Property Type Description
ids Collection of strings A collection of the Permission Id that should be removed from the Datanode.

See Remove permissions for API information.

Create permissions

The following request can be used to set permissions on a Datanode:

POST /api/tenants/{tenantId}/resourcegroups/{resourceGroupId}/datanodes/{datanodeId}/permissions

Request body example:

{
    "referenceId": "d5c7fa53-bb3a-44c8-bd93-374ed5850d38",
    "permissions": [
        {
            "permissionNamespace": "dk.realequity.permission.fullaccess",
            "contextId": "d5c7fa53-bb3a-44c8-bd93-374ed5850d38",
            "contextNamespace": "dk.realequity.actor"
        }
    ]
}

:information_source: ContextNamespace
The allowed context namespaces can be found on the Security Permissions page.