Create a new permission definition
POST/permissions
Creates a new permission entry in the tenant's permission catalog. Use this during initial RBAC setup or when introducing a new resource/action pair that roles can then be granted; it is typically called by administrators configuring access control, not by end-user workflows.
Preconditions: the caller must be authenticated and hold the CREATE_PERMISSION permission for the tenant.
Supply a request body with resource, action, and optionally description.
On success, returns the created permission including its server-assigned id. Note: createdAt and updatedAt are always null in the current implementation.
Request
Responses
- 201
- 400
- 500
The newly created permission, including its server-assigned id. Note: createdAt and updatedAt are always null in the current implementation.
Returned when the downstream data service rejects the request body as invalid (for example, a missing resource or action). This endpoint performs no local bean-validation, so the exact trigger is determined by the permissions data service.
An unexpected error occurred while creating the permission, typically a downstream data-service failure. Retry the request or contact support if the error persists.