Assign Roles to Endpoint

Assigns one or more roles to a specific API endpoint. Existing assignments are preserved (additive). **Important:** This operation is atomic - if ANY role fails to assign (e.g., role not found), the ENTIRE operation is rejected and NO roles are assigned. This prevents partial/inconsistent permission states.

Authorization

BearerAuth

AuthorizationBearer <token>

In: header

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

endpoint*string

The registry does NOT store route patterns. RegisterAPIEndpoints stores makeSQLFriendly(route.Pattern) (common/rbac/rbac_api.go), which replaces every {segment} with a literal % — the original pattern survives only in metadata.pattern. The committed seeds show the stored form: /v1/accounts/% , /v1/misc/feeds/%/% . Every lookup in this module matches with exact equality, so a value written the way the route is declared — /v1/accounts/{id} — matches nothing: assign and remove answer 404 rbac_m.endpoint_not_found, and the bulk export drops it silently, returning 200 with a "# Note: 1 endpoints could not be exported" line that does not say which. Responses carry the % form too.

method*string

roles*array<string>

Roles to grant access (can be multiple)

Response Body

`application/json`

curl -X POST "https://example.com/v1/rbac/endpoint-role/assign" \  -H "Content-Type: application/json" \  -d '{    "endpoint": "/v1/accounts/%",    "method": "GET",    "roles": [      "User",      "StandardUser"    ]  }'

{
  "message": "Roles assigned successfully",
  "endpoint": "/v1/customers",
  "method": "GET",
  "roles": [
    "User",
    "StandardUser"
  ]
}

{
  "status": 400,
  "code": "rbac_m.endpoint_not_found",
  "message": "Invalid input",
  "details": [
    {
      "field": "roles",
      "rule": "required",
      "param": "string",
      "message": "roles is required"
    }
  ],
  "class": "validation",
  "retryable": false
}

{
  "status": 400,
  "code": "rbac_m.endpoint_not_found",
  "message": "Invalid input",
  "details": [
    {
      "field": "roles",
      "rule": "required",
      "param": "string",
      "message": "roles is required"
    }
  ],
  "class": "validation",
  "retryable": false
}

{
  "status": 400,
  "code": "rbac_m.endpoint_not_found",
  "message": "Invalid input",
  "details": [
    {
      "field": "roles",
      "rule": "required",
      "param": "string",
      "message": "roles is required"
    }
  ],
  "class": "validation",
  "retryable": false
}

{
  "status": 400,
  "code": "rbac_m.endpoint_not_found",
  "message": "Invalid input",
  "details": [
    {
      "field": "roles",
      "rule": "required",
      "param": "string",
      "message": "roles is required"
    }
  ],
  "class": "validation",
  "retryable": false
}

{
  "status": 400,
  "code": "rbac_m.endpoint_not_found",
  "message": "Invalid input",
  "details": [
    {
      "field": "roles",
      "rule": "required",
      "param": "string",
      "message": "roles is required"
    }
  ],
  "class": "validation",
  "retryable": false
}

{
  "status": 400,
  "code": "rbac_m.endpoint_not_found",
  "message": "Invalid input",
  "details": [
    {
      "field": "roles",
      "rule": "required",
      "param": "string",
      "message": "roles is required"
    }
  ],
  "class": "validation",
  "retryable": false
}

{
  "overall_status": "unhealthy",
  "message": "Service is shutting down",
  "timestamp": "2019-08-24T14:15:22Z"
}

Authorization

Request Body

Response Body

200application/json

400application/json

401application/json

403application/json

404application/json

429application/json

500application/json

503application/json

`application/json`

`application/json`

`application/json`

`application/json`

`application/json`

`application/json`

`application/json`

`application/json`