Authorization

An Authorization request consists of:

  • Subject - defines attributes of the entity who tries to access the resource

  • Resource - defines the resource that is being accessed

  • Action - the action that is being performed on the resource.

curl --location --request POST 'https://api.big-acl.com/authorize'
--header 'Content-Type: application/json'
--header 'Authorization: Bearer <API Key>'
--data-raw '{
   "subjectType": "Doctor",
   "subjectPropertyName": "id",
   "subjectPropertyValue": "...",
   "actionId": "read",
   "resourceType": "MedcialRecord",
   "resourcePropertyName": "id",
   "resourcePropertyValue": "..."
}'

Last updated