Skip to content

Conversation

@hassandotcms
Copy link
Contributor

@hassandotcms hassandotcms commented Nov 25, 2025

Proposed Changes

  • Reset API: PUT /api/v1/permissions/{assetId}/_reset removes individual permissions, making asset inherit from parent
  • Idempotency: Returns 409 Conflict if asset already inherits; includes previousPermissionCount in response
  • Admin-only: Restricted to admin users for safety

Checklist

  • Tests
  • Translations
  • Security Implications Contemplated (add notes if applicable)

Additional Info

** any additional useful context or info **

Screenshots

Original Updated
** original screenshot ** ** updated screenshot **

This PR fixes: #33914

1. New GET /permissions/{assetId} endpoint - View asset permissions with pagination, supporting all permissionable types (folders, hosts, contentlets, etc.) 2. Permission helper infrastructure - Added AssetPermissionHelper for building responses and ResponseEntityAssetPermissionsView for typed API responses, integrated via CDI 3. Documentation and tests - OpenAPI spec updates and comprehensive Postman test suite covering happy paths, pagination, validation, and error cases
- PUT /api/v1/permissions/{assetId} - REST endpoint to save/update asset permissions (admin-only) - Auto-breaks inheritance when saving on inheriting asset, supports ?cascade=true for async propagation - Returns message, permissionCount, inheritanceBroken, and updated asset object
- Reset API: PUT /api/v1/permissions/{assetId}/_reset removes individual permissions, making asset inherit from parent - Idempotency: Returns 409 Conflict if asset already inherits; includes previousPermissionCount in response - Admin-only: Restricted to admin users for safety
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

2 participants