Proposals Authorization
CASL ability actions
This is the list of the permissions methods available for Proposals and all their endpoints
Endpoint Authorization
- ProposalCreate
- ProposalRead
- ProposalUpdate
- ProposalDelete
- ProposalAttachmentCreate
- ProposalAttachmentRead
- ProposalAttachmentUpdate
- ProposalAttachmentDelete
- ProposalDatasetRead
(Data) Instance Authorization
- ProposalCreateOwner
- ProposalCreateAny
- ProposalReadManyPublic
- ProposalReadManyAccess
- ProposalReadManyOwner
- ProposalReadOnePublic
- ProposalReadOneAccess
- ProposalReadOneOwner
- ProposalReadAny
- ProposalUpdateOwner
- ProposalUpdateAny
- ProposalDeleteOwner
- ProposalDeleteAny
- ProposalAttachmentCreateOnwer
- ProposalAttachmentCreateAny
- ProposalAttachmentReadManyPublic
- ProposalAttachmentReadManyAccess
- ProposalAttachmentReadManyOwner
- ProposalAttachmentReadManyAny
- ProposalAttachmentUpdateOwner
- ProposalAttachmentUpdateAny
- ProposalAttachmentDeleteOwner
- ProposalAttachmentDeleteAny
- ProposalDatasetReadPublic
- ProposalDatasetReadAccess
- ProposalDatasetReadOwner
- ProposalDatasetReadAny
Priority
graph LR;
ProposalCreate-->ProposalsCreateOwner;
ProposalCreateOwner-->ProposalCreateAny;
ProposalRead-->ProposalReadManyPublic;
ProposalReadManyPublic-->ProposalReadManyAccess;
ProposalReadManyAccess-->ProposalReadManyOwner;
ProposalReadManyOwner-->ProposalReadAny;
ProposalRead-->ProposalReadOnePublic;
ProposalReadOnePublic-->ProposalReadOneAccess;
ProposalReadOneAccess-->ProposalReadOneOwner;
ProposalReadOneOwner-->ProposalReadAny;
ProposalUpdate-->ProposalUpdateOwner;
ProposalUpdateOwner-->ProposalUpdateAny;
ProposalDelete-->ProposalDeleteOwner;
ProposalDeleteOwner-->ProposalDeleteAny;
ProposalAttachmentCreate-->ProposalAttachmentCreateOnwer;
ProposalAttachmentCreateOnwer-->ProposalAttachmentCreateAny;
ProposalAttachmentRead-->ProposalAttachmentReadManyPublic;
ProposalAttachmentReadManyPublic-->ProposalAttachmentReadManyAccess;
ProposalAttachmentReadManyAccess-->ProposalAttachmentReadManyOwner;
ProposalAttachmentReadManyOwner-->ProposalAttachmentReadManyAny;
ProposalAttachmentUpdate-->ProposalAttachmentUpdateOwner;
ProposalAttachmentUpdateOwner-->ProposalAttachmentUpdateAny;
ProposalAttachmentDelete-->ProposalAttachmentDeleteOwner;
ProposalAttachmentDeleteOwner-->ProposalAttachmentDeleteAny;
ProposalDatasetRead-->ProposalDatasetReadPublic;
ProposalDatasetReadPublic-->ProposalDatasetReadAccess;
ProposalDatasetReadAccess-->ProposalDatasetReadOwner;
ProposalDatasetReadOwner-->ProposalDatasetReadAny;
Authorization table
| HTTP method | Endpoint | Endpoint Authentication | Anonymous | Authenticated User | Proposals Groups | Admin Groups | Delete Groups | Notes |
|---|---|---|---|---|---|---|---|---|
| POST | Proposals | ProposalCreate | no | no | Any ProposalCreateAny |
Any ProposalCreateAny |
no | |
| GET | Proposals | ProposalRead | Public ProposalReadManyPublic |
Has Access ProposalReadManyAccess |
Has Access ProposalReadManyAccess |
Any ProposalReadAny |
no | |
| GET | Proposals/fullquery | ProposalRead | Public ProposalReadManyPublic |
Has Access ProposalReadManyAccess |
Has Access ProposalReadManyAccess |
Any ProposalReadAny |
no | |
| GET | Proposals/fullfacet | ProposalRead | Public ProposalReadManyPublic |
Has Access ProposalReadManyAccess |
Has Access ProposalReadManyAccess |
Any ProposalReadAny |
no | |
| GET | Proposals/pid | ProposalRead | Public ProposalReadOnePublic |
Has Access ProposalReadOneAccess |
Has Access ProposalReadOneAccess |
Any ProposalReadAny |
no | |
| GET | Proposals/fullquery | ProposalRead | Public ProposalReadOnePublic |
Has Access ProposalReadOneAccess |
Has Access ProposalReadOneAccess |
Any ProposalReadAny |
no | |
| PATCH | Proposals/pid | ProposalUpdate | no | no | Any ProposalUpdateAny |
Any ProposalUpdateAny |
no | |
| DELETE | Proposals/pid | ProposalDelete | no | no | no | no | Any ProposalDeleteAny |
|
| POST | Proposals/pid/attachements | ProposalAttachementCreate | no | no | Any ProposalAttachmentCreateAny |
Any ProposalAttachmentCreateAny |
no | |
| GET | Proposals/pid/attachements | ProposalAttachmentRead | Public ProposalAttachmentReadManyPublic |
Has Access ProposalAttachmentReadManyAccess |
Has Access ProposalAttachmentReadManyAccess |
Any ProposalAttachmentReadManyAny |
no | |
| PATCH | Proposals/pid/attachments/aid | ProposalAttachmentUpdate | no | no | Owner ProposalAttachmentUpdateOwner |
Any ProposalAttachmentUpdateAny |
no | |
| DELETE | Proposals/pid/attachment/aid | ProposalAttachmentDelete | no | no | Onwer ProposalAttachmentDeleteOwner |
Any ProposalAttachmentDeleteAny |
no | |
| GET | Proposals/pid/datasets | ProposalDatasetRead | Public ProposalDatasetReadOnePublic |
Has Access ProposalDatasetReadOneAccess |
Has Access ProposalDatasetReadOneAccess |
Any ProposalDatasetReadOneAny |
no |