Permissions issued by the user#

List of permissions#

Method

GET https://login.company.com/blitz/api/v3/users/{subjectId}/acls

Getting a list of permissions issued by the user.

Required permissions: blitz_api_usec or blitz_api_sys_usec.

Returns

JSON containing a list of permissions granted by the user.

Example

GET /blitz/api/v3/users/d2580c98‑e584‑4aad‑a591‑97a8cf45cd2a/acls HTTP/1.1
Authorization: Bearer cNwIXatB0wk5ZHO0xG5kxuuLubesWcb_yPPqLOFWDuwzMDc0Nz
Cache-Control: no-cache
[
    {
        "id": "d2580c98 e584 4aad a591 97a8cf45cd2a_app1",
        "updated": 1552896932780,
        "client_id": "app1",
        "scopes": [
            "openid",
            "profile",
        ]
    }
]

Revocation of permission#

Method

DELETE https://login.company.com/blitz/api/v3/users/{subjectId}/acls/{acl_id}

Revocation of the issued permission.

Required permissions: blitz_api_usec_chg or blitz_api_sys_usec_chg.

URL parameters

The received identifier (id) of the permission is passed as the``acl_id``.

Headers

In user mode, headers with the user’s IP address and User-Agent must be passed.

Example

Request#
DELETE /blitz/api/v3/users/d25..2a/acls/d25..2a_app1 HTTP/1.1
Authorization: Bearer cNwIXatB0wk5ZHO0xG5kxuuLubesWcb_yPPqLOFWDuwzMDc0Nz