Toggle single permission

What this does: Grants or revokes a single permission for a custom role. This is the most granular way to update role permissions - perfect for making individual permission changes.

Important restrictions:

• Base roles cannot have their permissions modified
• Only custom roles can be updated
• The permission must be valid and allowed for the role type
• Guest roles cannot be granted certain permissions (e.g., workspace administration)

How it works:

• Provide the permission key in the URL path (e.g., “projects.create”, “tasks.delete”)
• Set the “allow” field to true to grant the permission, or false to revoke it
• The permission is validated against disallowed permissions for the role type
• All other permissions remain unchanged

Permission inheritance:

• If the role has a parent that grants this permission, setting allow=true explicitly allows it
• If the role has a parent that grants this permission, setting allow=false explicitly disallows it (overrides inheritance)
• If the role has a parent that disallows this permission, setting allow=true explicitly allows it (overrides inheritance)

What is returned: Returns the complete role details with updated permissions, showing the new state of all permissions including the one that was changed.

Use cases:

• Grant a specific permission to a role (e.g., allow “projects.create”)
• Revoke a specific permission from a role (e.g., disallow “tasks.delete”)
• Fine-tune role permissions one at a time
• Build permission management UIs with individual toggles

Example: To grant “projects.create” permission: PATCH /roles/role-id/permissions/projects.create with {“allow”: true} To revoke “tasks.delete” permission: PATCH /roles/role-id/permissions/tasks.delete with {“allow”: false}

curl -X PATCH "https://leadtime.app/api/public/administration/roles/string/permissions/string" \
  -H "Authorization: Bearer YOUR_ACCESS_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
  "allow": true
}'

const response = await fetch("https://leadtime.app/api/public/administration/roles/string/permissions/string", {
  method: "PATCH",
  headers: {
    "Authorization": "Bearer YOUR_ACCESS_TOKEN",
    "Content-Type": "application/json"
  },
  body: JSON.stringify({
  "allow": true
})
});

import requests

response = requests.patch(
    "https://leadtime.app/api/public/administration/roles/string/permissions/string",
    headers={
        "Authorization": "Bearer YOUR_ACCESS_TOKEN",
        "Content-Type": "application/json"
    },
    json={
  "allow": True
},
)

{
  "createdAt": "2024-01-01T00:00:00Z",
  "createdBy": "string",
  "description": "Standard employee role",
  "editedAt": "2024-01-01T00:00:00Z",
  "effectivePermissions": {
    "profile.manage": true,
    "tasks.create": true,
    "tasks.delete": false
  },
  "icon": "ri-user-line",
  "id": "workspace-id_employee",
  "name": "Employee",
  "parentId": "workspace-id_admin",
  "permissions": {
    "projects.create": true,
    "projects.delete": false
  },
  "rawPermissions": {
    "tasks.create": true,
    "tasks.delete": false
  },
  "readOnly": false,
  "type": "normal"
}