Current user permission queries#
These endpoints are useful to check which customers and permissions are available for the current user, as well as query for current user group membership.
For 3rd party applications, integrated via OAuth2, these endpoints may
be used to query about the permissions of the user the session belongs
This is useful to utilize the Argus permission system to query for customers, permissions and roles if they should also apply for the 3rd party application.
List customers available in session#
Invoking the session customers endpoint, lists all customers which are available to the current user (in the current session):
curl -XGET -H"Argus-API-Key: my/api/key" https://api.mnemonic.no/currentuser/v1/customers?keyword=test&limit=10
The response contains a list of “Customer Info” objects, each with the id, shortname and name of the customer.
keyword parameter, the result will be filtered to customers
shortname matches the keywords.
This is useful for autocompleters.
“Available customers” only means that the customer is somehow visible in the current session. The current user/session may have different permissions for each customer, so there is no guarantee that all customers returned are usable for specific operations.
To check for specific permissions, see the “permission” endpoint below
List groups which the current user is member of#
This endpoint lists all groups which the current user is member of.
includeAncestors=true option will also include ancestor
groups, i.e. groups which the current user is not direct member of, but
is a transitive member:
curl -XGET -H"Argus-API-Key: my/api/key" https://api.mnemonic.no/currentuser/v1/groups?includeAncestors=true
List functions available in session#
Invoking the session functions endpoint, lists all functions which are available to the current user (in the current session):
curl -XGET -H"Argus-API-Key: my/api/key" https://api.mnemonic.no/currentuser/v1/functions?onlyRoles=true&keywords=test
“Available functions” only means that the function is somehow visible in
the current session.
To know if a user has permission to a specific function for a specific customer, use the “permission” endpoint below.
Secondly note, that users that have the
will have access to list ALL functions in the system, even if the user
does not have any permission granted for that function.
Also note that “available functions” only shows functions which are
valid with the security level of the current session.
Functions requiring higher security level than the current session, will not be visible.
Check for specific permission#
To check if the current session is granted permission for a specific function, for a specific customer, use the permission endpoint:
curl -XGET -H"Argus-API-Key: my/api/key" https://api.mnemonic.no/currentuser/v1/permission/myfunction/mycustomer
Endpoint will return
200 OK if the current user is permitted the
function for the specified customer, or
403 Unauthorized if not
The permissions endpoint will respect the security level of the current session.