Look up permission definitions for the authenticated caller
Returns compact canonical permission definitions. scope=mine is resolved from the current authenticated user only; it accepts no user or role identifier. Definitions explain what each permission contributes, not a promise that a requested action or record will be allowed.
GET
/administration/permission-definitionsAuthorization
AuthorizationOAuth2 access token · headerrequiredScopes:
api:reador
AuthorizationBearer token (JWT) · headerrequiredQuery parameters
keysstring[]Comma-separated permission keys to return.
groupstringExact shared RBAC permission group.
searchstringCase-insensitive search over key, group, subgroup, name, and description.
scopestringRestrict results to the authenticated caller’s effective permission keys.
Allowed:
minelimitnumberMaximum entries. Defaults to 25 for unscoped catalog browsing and 200 for scope=mine.
min 1 · max 200
Responses
200
Array of
PermissionDefinitionItemdescriptionstringrequiredWhat the permission lets a person do and its most important boundary or condition.
groupstringShared RBAC UI group, when defined.
keystringrequiredCanonical permission key.
namestringrequiredProduct-facing permission name.
subgroupstringShared RBAC UI subgroup.
401Unauthorized - Invalid or missing authentication token
403Forbidden - Insufficient API scopes or permissions
Request
curl -X GET "https://leadtime.app/api/public/administration/permission-definitions" \
-H "Authorization: Bearer YOUR_ACCESS_TOKEN"const response = await fetch("https://leadtime.app/api/public/administration/permission-definitions", {
method: "GET",
headers: {
"Authorization": "Bearer YOUR_ACCESS_TOKEN"
}
});import requests
response = requests.get(
"https://leadtime.app/api/public/administration/permission-definitions",
headers={
"Authorization": "Bearer YOUR_ACCESS_TOKEN"
},
)Response
[
{
"description": "string",
"group": "string",
"key": "tasks.create",
"name": "string",
"subgroup": "string"
}
]Unauthorized - Invalid or missing authentication token
Forbidden - Insufficient API scopes or permissions