{
  "opencollection": "1.0.0",
  "info": {
    "name": "nCino Mortgage User Permissions API",
    "version": "1.0"
  },
  "request": {
    "auth": {
      "type": "oauth2",
      "flow": "client_credentials",
      "accessTokenUrl": "/oauth/token",
      "credentials": {
        "clientId": "{{clientId}}",
        "clientSecret": "{{clientSecret}}"
      }
    }
  },
  "items": [
    {
      "info": {
        "name": "User Permissions",
        "type": "folder"
      },
      "items": [
        {
          "info": {
            "name": "🚧 Retrieve all permissions held by a user, resolved across all assigned roles. (BETA)",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.ncinomortgage.com/users/:user_id/permissions",
            "headers": [
              {
                "name": "X-Api-Version",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "user_id",
                "value": "",
                "type": "path",
                "description": "User ID."
              },
              {
                "name": "page",
                "value": "",
                "type": "query",
                "description": "The page to retrieve."
              },
              {
                "name": "page_size",
                "value": "",
                "type": "query",
                "description": "The number of records returned in each page."
              }
            ]
          },
          "docs": "> 🚧 Under construction\n> **This endpoint is in beta.** Functionality may change without notice, support is limited, and use in production is not recommended. Your feedback is appreciated.\n\nReturns the union of permissions across every role assigned to the user,\ndeduplicated and sorted, as an array of permission key strings."
        },
        {
          "info": {
            "name": "🚧 Check whether a user has a specific permission. (BETA)",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.ncinomortgage.com/users/:user_id/permissions/:permission_key",
            "headers": [
              {
                "name": "X-Api-Version",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "permission_key",
                "value": "",
                "type": "path",
                "description": "The permission key to check (e.g. \"manage_users\")."
              },
              {
                "name": "user_id",
                "value": "",
                "type": "path",
                "description": "User ID."
              }
            ]
          },
          "docs": "> 🚧 Under construction\n> **This endpoint is in beta.** Functionality may change without notice, support is limited, and use in production is not recommended. Your feedback is appreciated.\n\nReturns +{ \"granted\": true }+ if the permission is held by any of the\nuser's assigned roles; +{ \"granted\": false }+ otherwise. Never 404s on\nthe permission key itself — only on a missing user."
        }
      ]
    }
  ],
  "bundled": true
}