Skip to main content
POST
Check if a subject has a permission on an object

Authorizations

Authorization
string
header
required

Runtime context-key (rctx_*) issued by the Ravi gateway. Required for every non-open scope. Bootstrap the first key with ravi daemon init-admin-key; rotate, derive, and revoke via the ravi context family. Specs: runtime/context-keys, sdk/auth.

Body

application/json
object
string
required

Object (e.g., group:contacts, session:dev-grupo1)

permission
string
required

Permission (e.g., execute, access, admin)

subject
string
required

Subject (e.g., agent:dev)

Response

Success — no @Returns schema declared; payload shape is loose.

The response is of type object.