Skip to main content

Search allowed actions for the current user (render-time decision)

POST 

/api/v4/access_control/decisions/actions/search

Returns non-authoritative, render-time ABAC decisions for the current session user on a given resource and set of actions. Use these decisions to decide whether to show or hide UI controls before the user attempts an action.

The subject is always the authenticated session user; there is no way to probe another user's decisions. Server-side enforcement always re-evaluates the full policy on the actual request and remains the source of truth.

Gated by the PermissionPolicies feature flag and an Enterprise license. When ABAC is inactive for the resource, every action is returned as allowed: true, evaluated: true.

Permissions

Must be authenticated (any logged-in user).

Request

Responses

Render-time action decisions returned successfully.