Check if user has a specific permission

1 min

GET

https://api.upstartcommerce.com/profile-permissions/users/{userId}/permissions/{permissionName}/check

Checks whether the specified user has the given permission. Tenant context is extracted from the JWT token or X-Tenant-Id header.

Returns 200 with { "allowed": true/false } - the HTTP status indicates the API call succeeded, the body indicates the permission check result.

Required Permission: None if checking own permissions (userId matches token subject). Otherwise requires profile-permissions.users.check.

userIdstring<uuid>User identifier

permissionNamestringPermission name to check

acceptstringGenerated from available response content types

200Permission check completed successfully

400Invalid request parameters

401Missing or invalid authentication token

404User not found

500Internal server error

curl --request GET \
     --url https://api.upstartcommerce.com/profile-permissions/users/{userId}/permissions/{permissionName}/check \
     --header 'accept: application/json'