Check the current user’s permissions on resources

POST

/authorization/me/check

Checks resource access for the authenticated caller only. Authorization: any authenticated organization member — the subject is always the caller’s organization membership, so a caller can never probe another subject. Body: checks is a 1–50-item array of { permission, resourceType, resourceExternalId }. Returns { results } (one entry per check, each with an authorized boolean, in request order). If the caller has no organization-membership claim, returns { results: [] }.

Checks resource access for the authenticated caller only. Authorization: any authenticated organization member — the subject is always the caller’s organization membership, so a caller can never probe another subject. Body: `checks` is a 1–50-item array of `{ permission, resourceType, resourceExternalId }`. Returns `{ results }` (one entry per check, each with an `authorized` boolean, in request order). If the caller has no organization-membership claim, returns `{ results: [] }`.

Authentication

AuthorizationBearer

Bearer authentication of the form Bearer <token>, where token is your auth token.

Request

This endpoint expects an object.

checkslist of objectsRequired

Response

Per-check authorization results for the calling user.

resultslist of objects

One entry per requested check, in request order.

$	curl -X POST https://api.cloudraker.com/authorization/me/check \
>	-H "Authorization: Bearer <token>" \
>	-H "Content-Type: application/json" \
>	-d '{
>	"checks": [
>	{
>	"permission": "space:read",
>	"resourceType": "space",
>	"resourceExternalId": "space-12345"
>	}
>	]
>	}'

1	{
2	"results": [
3	{
4	"permission": "space:read",
5	"resourceType": "space",
6	"resourceExternalId": "space-12345",
7	"authorized": true
8	}
9	]
10	}