User Permissions

Kullanıcı izinleri yönetimi için kullanılan endpoint'ler.

---

Kullanıcı izinlerini getir

Giriş yapan kullanıcının sahip olduğu izinleri getirir. resourceContext parametresi ile UI veya API izinlerine göre filtreleme yapılabilir.

Authentication

• x-auth(tenant-id)

HTTP Request

GET /role/permissions-for-user

Request Parameters

Field	Type	Required	Default	Desc
resourceContext	string(enum)	false	-	Kaynak bağlamı (UI, API)

Response Parameters

Field	Type	Nullable	Desc
action	string	false	İzin aksiyonu (viewPageAction, inPageAction)
subject	array	false	İzin verilen kaynak listesi
conditions	object	true	İzin koşulları (alt kaynak izinleri için)

Response Body Example

[
  {
    "action": "viewPageAction",
    "subject": [
      "/treasury/blacklist-management"
    ]
  },
  {
    "action": "viewPageAction",
    "subject": [
      "/treasury/balance-summary"
    ]
  },
  {
    "action": "viewPageAction",
    "subject": [
      "/treasury/dashboard-treasury"
    ]
  },
  {
    "action": "inPageAction",
    "subject": [
      "/treasury/dashboard-treasury"
    ],
    "conditions": {
      "perform": {
        "$in": [
          "WIDGET app-asset-status-try",
          "WIDGET app-balance-statistics",
          "WIDGET app-last-rates",
          "WIDGET app-new-user-statistics",
          "WIDGET app-process-volume-report",
          "WIDGET app-spread-report",
          "WIDGET app-trade-statistics"
        ]
      }
    }
  },
  {
    "action": "viewPageAction",
    "subject": [
      "/treasury/user-summary"
    ]
  },
  {
    "action": "inPageAction",
    "subject": [
      "/treasury/user-summary"
    ],
    "conditions": {
      "perform": {
        "$in": [
          "DISPLAY internal-users",
          "DISPLAY user-balance-without-otp",
          "EDIT user-country-access",
          "EDIT user-level",
          "EDIT user-package",
          "WIDGET app-access-management",
          "WIDGET app-balance-info",
          "WIDGET app-basic-info",
          "WIDGET app-customer-positions",
          "WIDGET app-demo-accounts",
          "WIDGET app-order-history",
          "WIDGET app-package-operations",
          "WIDGET app-sib-creator",
          "WIDGET app-transaction-history",
          "WIDGET app-transfer-history",
          "WIDGET app-user-additional-info",
          "WIDGET app-user-crypto-addresses",
          "WIDGET app-user-documents",
          "WIDGET app-user-logs",
          "WIDGET app-withdrawal-queue"
        ]
      }
    }
  }
]

---

Kullanıcı menü ve izinlerini getir

Giriş yapan kullanıcının sahip olduğu menü öğelerini ve izinleri birlikte getirir.

Authentication

• x-auth(tenant-id)

HTTP Request

GET /role/menu-and-permissions-for-user

Request Parameters

Field	Type	Required	Default	Desc
resourceContext	string(enum)	false	-	Kaynak bağlamı (UI, API)

Response Parameters

Field	Type	Nullable	Desc
action	string	false	İzin aksiyonu (viewPageAction, inPageAction)
subject	array	false	İzin verilen kaynak listesi
conditions	object	true	İzin koşulları (alt kaynak izinleri için)

Response Body Example

[
  {
    "action": "viewPageAction",
    "subject": [
      "/treasury/blacklist-management"
    ]
  },
  {
    "action": "viewPageAction",
    "subject": [
      "/admin/vault-management"
    ]
  },
  {
    "action": "viewPageAction",
    "subject": [
      "/tenants/wallets"
    ]
  },
  {
    "action": "viewPageAction",
    "subject": [
      "/tenants/actions"
    ]
  },
  {
    "action": "viewPageAction",
    "subject": [
      "/admin/waf-management"
    ]
  },
  {
    "action": "viewPageAction",
    "subject": [
      "/admin/role-management"
    ]
  }
]