Permission

Permissions control the actions users and roles can perform.

📄️ List Permissions

Lists effective permission scopes, inherited overrides, and scopes available to grant for an entity or role. Omit `entityId` to list the current user's permissions. Listing another entity requires the `user:manage` permission; listing a role requires the `role:manage` permission. Use this to inspect or audit what an entity can do; use `/permission/check` instead when you only need a yes/no answer for one permission.

📄️ Check Permission

Checks whether the authenticated user has a specific `permissionType` on a target entity and returns `hasPermission`. For several targets, `match` defaults to `any`; use `all` to require permission on every non-empty target. An empty target list fails closed in either mode. Use this before attempting an action to see if it will be allowed; use `/permission/list` to see the full set of permissions and scopes for a user or role.

📄️ Update Permission

Enables, disables, or changes a permission override for an entity or role. Use `none` to disable the permission and `default` to remove its override. Managing entity permissions requires the `user:manage` permission; managing role permissions requires the `role:manage` permission. You can only grant scopes that your own permissions allow you to grant. Use `/permission/list` first to see current scopes and which scopes can be granted (`overridable`).