Managing permissions

Examplary uses a role-based and permission-based access control system to manage what users can do within an organization.

Roles and permissions can be managed through the Examplary web application or via the API.

Giving a user access to a content item:

POST /permissions/exam_1234

{
  "actor": "user_5678",
  "role": "manager"
}

Listing permissions for a content item:

GET /permissions/exam_1234

[
  {
    "actor": "user_5678",
    "role": "manager",
    "createdAt": "2024-01-15T12:34:56Z",
    "updatedAt": "2024-01-20T09:21:43Z",
    "createdBy": "user_9012"
  },
  {
    "actor": "group_9012",
    "role": "viewer",
    "createdAt": "2024-01-15T12:34:56Z",
    "updatedAt": "2024-01-20T09:21:43Z",
    "createdBy": "user_9012"
  }
]