Remove Folder ACL

Overview

This operation removes READ or WRITE permissions on repository folders for the specified users or roles. No propagation takes place to subfolders.

If any ACL has been granted separately on subfolders then these are not removed. Generally, subfolders will not have permissions but will inherit from the parent folder.

If READ permission is removed then WRITE permission will also be removed, since a user cannot WRITE to a folder which they cannot READ.

ACL Authorization Flow

The user making this request will only be able to remove permissions on resources within the folders (or subfolders) on which they have WRITE permission.

HTTP POST URL Format

The following format is used for HTTP POST requests:

HTTP POST URL: /acl/folders/delete
POST DATA:  {
    "users":[
        "user1"
    ],
    "roles":[
        "role1"
    ],
    "resources":[
        "/MyMaps/"
    ],
    "permissions":[
        "WRITE"
    ]
}
POST HEADER: Content-Type:application/json

Parameters


Parameter	Type	Required	Description
users	String	Yes	Specifies a list of users. Required only when roles are not given in the request.
roles	String	Yes	Specifies a list of roles. Required only when users are not given in the request.
resources	String	Yes	Specifies a list of folders. Include a forward slash (/) after a folder name ("/MyMaps/").
permissions	String	Yes	Specifies the permission to be removed from repository folder. The permission can be one or more of READ or WRITE.

Returns

Removes READ or WRITE permissions from one or more repository folders for the specified users or roles.

Example for POST

Request URL

http://<server>:<port>/rest/Spatial/AccessControlService/acl/folders/delete

Request Body:

{
    "users": [
        "user1"
    ],
    "roles": [
        "role1"
    ],
    "resources": [
        "/Samples/NamedTables/"
    ],
  "permissions": [ 
    "READ",
    "WRITE"
  ]
}

Response

{
    "users": [
        "user1"
    ],
    "roles": [
        "role1"
    ],
    "resources": [
        "/Samples/NamedTables/"
    ]
}