查看用户组有效权限 - MemoryLake 中国站

curl -X GET 'https://app.memorylake.cn/openapi/memorylake/admin/v1/access-groups/7013fb5c15cfb29411f040967354b8a3/effective-permissions' \
  -H 'Authorization: Bearer sk_xxxxxx'

{
  "success": true,
  "message": "Operation completed successfully",
  "data": {
    "group_id": "cda040c43b8de706929b9cfad8d35791",
    "member_count": 1,
    "name": "Example name",
    "permissions": [
      {
        "permission": "example",
        "sources": [
          {
            "type": "role",
            "id": "7ea9bf65e6937c3c168bc7a2a0f6fbf2",
            "name": "Example name"
          }
        ]
      }
    ],
    "scopes": [
      {
        "mode": "all",
        "resource_type": "example",
        "available_actions": [
          "example"
        ],
        "instances": [
          {
            "id": "bc572b050c9920425b5fd75681eccbb2",
            "actions": [],
            "effective_actions": [],
            "permission_level": "read",
            "shadowed_actions": [],
            "via_permission_level": false,
            "workspace_id": "0fa2d21dc175adc7a003e0b37f156cb1"
          }
        ]
      }
    ],
    "inherits_from": {
      "type": "role",
      "id": "7ea9bf65e6937c3c168bc7a2a0f6fbf2",
      "name": "Example name"
    },
    "overridden_permissions": [
      "example"
    ]
  }
}

curl -X GET 'https://app.memorylake.cn/openapi/memorylake/admin/v1/access-groups/7013fb5c15cfb29411f040967354b8a3/effective-permissions' \
  -H 'Authorization: Bearer sk_xxxxxx'

{
  "success": true,
  "message": "Operation completed successfully",
  "data": {
    "group_id": "cda040c43b8de706929b9cfad8d35791",
    "member_count": 1,
    "name": "Example name",
    "permissions": [
      {
        "permission": "example",
        "sources": [
          {
            "type": "role",
            "id": "7ea9bf65e6937c3c168bc7a2a0f6fbf2",
            "name": "Example name"
          }
        ]
      }
    ],
    "scopes": [
      {
        "mode": "all",
        "resource_type": "example",
        "available_actions": [
          "example"
        ],
        "instances": [
          {
            "id": "bc572b050c9920425b5fd75681eccbb2",
            "actions": [],
            "effective_actions": [],
            "permission_level": "read",
            "shadowed_actions": [],
            "via_permission_level": false,
            "workspace_id": "0fa2d21dc175adc7a003e0b37f156cb1"
          }
        ]
      }
    ],
    "inherits_from": {
      "type": "role",
      "id": "7ea9bf65e6937c3c168bc7a2a0f6fbf2",
      "name": "Example name"
    },
    "overridden_permissions": [
      "example"
    ]
  }
}

GET /openapi/memorylake/admin/v1/access-groups/{group_id}/effective-permissions

返回用户组授予的全部内容，每项权限附带其来源（基础角色或基础用户组，或用户组自有列表），以及它提供访问的实例。

所需权限： access_group:view

路径参数

string

required

标识符

curl -X GET 'https://app.memorylake.cn/openapi/memorylake/admin/v1/access-groups/7013fb5c15cfb29411f040967354b8a3/effective-permissions' \
  -H 'Authorization: Bearer sk_xxxxxx'

响应

object

Show Access Group Effective Permissions 对象

string

用户组

integer

成员数

string

显示名称

array

该用户组授予的全部权限，每项标明来源：基础（inherits_from）或该用户组自身的权限列表

Show Effective Permission 对象

string

操作

array

此权限的来源

Show Effective Source Ref 对象

string

role、access_group 或 personal（直接设置在成员上的规则）

string

角色键或用户组 ID；个人时省略

string

角色或用户组的显示名称；personal 时省略

array

用户组开放访问的实例，按资源类型列出

Show Access Scope Entry 对象

string

all 表示所有实例；instances 表示仅列出的实例

string

资源类型，例如 memorylake:project（参见 GET /permission-catalog）

array

只读。成员角色对该类型授予的实例级操作——即范围条目最多可允许的操作。

array

mode 为 instances 时的实例列表

Show Access Scope Instance 对象

string

实例 ID，与数据 API 返回的一致

array

该实例上允许的操作。省略则为该成员角色允许的全部操作。

array

只读。成员当前角色仍授予的操作子集。

string

只读。当 via_permission_level 为 true 时的权限级别。可选值：read、write、manage。

array

只读。此处存储但成员当前角色已不再授予的操作。

boolean

只读。成员通过在此实例上授予的权限级别访问该实例，而非通过此范围。写入时可原样回传；此类实例会被跳过。

string

项目实例的父工作空间。写入项目实例时必填。

object

基础角色或基础用户组；用户组两者都没有时省略

Show Effective Source Ref 对象

string

role、access_group 或 personal（直接设置在成员上的规则）

string

角色键或用户组 ID；个人时省略

string

角色或用户组的显示名称；personal 时省略

array

用户组自有列表中未生效的权限

{
  "success": true,
  "message": "Operation completed successfully",
  "data": {
    "group_id": "cda040c43b8de706929b9cfad8d35791",
    "member_count": 1,
    "name": "Example name",
    "permissions": [
      {
        "permission": "example",
        "sources": [
          {
            "type": "role",
            "id": "7ea9bf65e6937c3c168bc7a2a0f6fbf2",
            "name": "Example name"
          }
        ]
      }
    ],
    "scopes": [
      {
        "mode": "all",
        "resource_type": "example",
        "available_actions": [
          "example"
        ],
        "instances": [
          {
            "id": "bc572b050c9920425b5fd75681eccbb2",
            "actions": [],
            "effective_actions": [],
            "permission_level": "read",
            "shadowed_actions": [],
            "via_permission_level": false,
            "workspace_id": "0fa2d21dc175adc7a003e0b37f156cb1"
          }
        ]
      }
    ],
    "inherits_from": {
      "type": "role",
      "id": "7ea9bf65e6937c3c168bc7a2a0f6fbf2",
      "name": "Example name"
    },
    "overridden_permissions": [
      "example"
    ]
  }
}

​路径参数

​响应

路径参数

响应