CheckPermission - CheckPermission--智能体身份和权限管理平台-火山引擎

文档中心

智能体身份和权限管理平台

权限管理

CheckPermission - CheckPermission

CheckPermission API

请求参数

下表仅列出该接口特有的请求参数和部分公共参数。更多信息请见公共参数。

参数	类型	是否必填	示例值	描述
Action	String	是	CheckPermission	要执行的操作，取值：CheckPermission。
Version	String	是	2025-10-30	API的版本，取值：2025-10-30。
NamespaceName	String	是	example	Name of the namespace
Principal	Object	是	{"Type": "User", "Id": "example"}	Principal
Operation	Object	是	{"Type": "Op", "Id": "example"}	Operation
Resource	Object	是	{"Type": "Resource", "Id": "example"}	Resource
References	Array of Object	否	[{"Entity": {"Type": "User", "Id": "example"}, "Parents": [{"Type": "Group", "Id": "example"}]}]	References of the entities
OriginalCallers	Array of Object	否	[{"Type": "User", "Id": "example"}]	List of original callers

返回参数

下表仅列出本接口特有的返回参数。更多信息请参见返回结构。

参数	类型	示例值	描述
Allowed	Boolean	true	If result of permission checking is allowed
Message	String	Failed to check permission	Error message if API call is failed.

请求示例

POST /?Action=CheckPermission&Version=2025-10-30 HTTP/1.1
Host: http://10.182.235.184:30190/api/v1/check
Content-Type: application/json; charset=UTF-8
X-Date: 20250930T081548Z
X-Content-Sha256: 287e874e******d653b44d21e
Authorization: HMAC-SHA256 Credential=Adfks******wekfwe/20250930/cn-beijing/id/request, SignedHeaders=host;x-content-sha256;x-date, Signature=47a7d934ff7b37c03938******cd7b8278a40a1057690c401e92246a0e41085f

{
  "NamespaceName": "fMa",
  "Principal": {
    "Type": "M",
    "Id": "xQK"
  },
  "Action": {
    "Type": "KAKP6t7z",
    "Id": "REKfoAL"
  },
  "Resource": {
    "Type": "4PRw",
    "Id": "EqlpF"
  }
}

返回示例

{
  "ResponseMetadata": {
    "RequestId": "20250930161554254027037057E71488",
    "Action": "CheckPermission",
    "Version": "2025-10-30",
    "Service": "id",
    "Region": "cn-beijing"
  },
  "Result": {
    "Allowed": false,
    "Message": "ZTtga"
  }
}

错误码

下表为您列举了该接口与业务逻辑相关的错误码。公共错误码请参见公共错误码文档。

状态码	错误码	错误信息	说明
400	MissingParameter.{parameter}	The required parameter %s is missing.
400	InvalidParameter.{parameter}	The parameter %s is invalid.
400	InvalidRequest	The request is invalid or malformed.
400	MissingAction	The request is missing an action.
400	InvalidAction	The specified action is invalid.
401	SignatureNotMatch	The request signature provided is incorrect.
403	AccessDenied	You are not authorized to perform this action.
403	InvalidAccessKeyId	The access key ID provided is not valid.
404	NotFound	Resource not found: %s.	资源 %s 不存在
409	Duplicated	Resource already exists: %s.	资源 %s 已存在
429	Throttling	The request is denied due to request throttling.
429	QuotaExceeded	Quota exceeded: %s.	配额 %s 已达上限
500	InternalError	Internal server error: %s.	内部服务错误: %s
500	DownstreamServerError	An error has occurred due to an unreachable service.
503	ServiceUnavailable	The request has failed due to a temporary failure of the server.

最近更新时间：2025.12.14 13:43:20

这个页面对您有帮助吗？

有用

无用