Grant/Revoke permissions from User or Role¶

Grant to user¶

Grants permissions to a user.

Method: POST
Path: /pulp/api/v2/permissions/actions/grant_to_user/
Permission: execute
Request Body Contents: 

login (string) - login of existing user
resource (string) - resource URI
operations (array) - array of operation strings;valid operations:’CREATE’,’READ’,’UPDATE’,’DELETE’,’EXECUTE’

Response Codes:

200 - if permissions were successfully granted to the user
400 - if any of the parameters are invalid or missing

Return: null

Sample Request:

{
 "operations": ["CREATE", "READ", "DELETE"],
 "login": "test-login",
 "resource": "/v2/repositories/"
}

Revoke from user¶

Revokes permissions from a user.

Method: POST
Path: /pulp/api/v2/permissions/actions/revoke_from_user/
Permission: execute
Request Body Contents: 

login (string) - login of existing user
resource (string) - resource URI
operations (array) - array of operation strings;valid operations:’CREATE’,’READ’,’UPDATE’,’DELETE’,’EXECUTE’

Response Codes:

200 - if permissions were successfully revoked from the user
400 - if any of the parameters are invalid or missing

Return: null

Sample Request:

{
 "operations": ["CREATE", "DELETE"],
 "login": "test-login",
 "resource": "/v2/repositories/"
}

Grant to role¶

Grants permissions to a role. This will add permissions to all users belonging to the role. Note that users added to the role after granting permissions will inherit these permissions from the role as well.

Method: POST
Path: /pulp/api/v2/permissions/actions/grant_to_role/
Permission: execute
Request Body Contents: 

role_id (string) - id of an existing role
resource (string) - resource URI
operations (array) - array of operation strings;valid operations:’CREATE’,’READ’,’UPDATE’,’DELETE’,’EXECUTE’

Response Codes:

200 - if permissions were successfully granted to the role
400 - if any of the parameters are invalid or missing

Return: null

Sample Request:

{
 "operations": ["CREATE", "READ", "DELETE"],
 "resource": "/v2/repositories/",
 "role_id": "test-role"
}

Revoke from role¶

Revokes permissions from a role. This will revoke permissions from all users belonging to the role unless they are granted by other roles as well.

Method: POST
Path: /pulp/api/v2/permissions/actions/revoke_from_role/
Permission: execute
Request Body Contents: 

role_id (string) - id of an existing role
resource (string) - resource URI
operations (array) - array of operation strings;valid operations:’CREATE’,’READ’,’UPDATE’,’DELETE’,’EXECUTE’

Response Codes:

200 - if permissions were successfully revoked from the role
400 - if any of the parameters are invalid or missing

Return: null

Sample Request:

{
 "operations": ["CREATE", "READ", "DELETE"],
 "resource": "/v2/repositories/",
 "role_id": "test-role"
}