...
| action | uri | HTTP method | Schema | Authorization |
|---|---|---|---|---|
| create AccessRequirement | /accessRequirement | POST | extension of AccessRequirement.json | parent Entity's CHANGE_PERMISSION permission |
| read paginated list of all AccessRequirement objects for an entity | /accessRequirement/{entitytIdentityId} | GET | VariableContentPaginatedResults<AccessRequirement> | parent Entity's READ permission |
| retrieve paginated list of unfufilled access requirements | /unfulfilledAccessRequirements/{entityId} | GET | VariableContentPaginatedResults<AccessRequirement> | parent Entity's READ permission |
| delete AccessRequirement (along with all approvals granted for the requirement) | /accessRequirement/{accessRqmtId} | DELETE | ---- | parent Entity's CHANGE_PERMISSION permission |
| create AccessApproval | /accessApproval | POST | AccessApproval.json | parent Entity's CHANGE_PERMISSION permission |
| read all AccessApproval objects for a given entity | /accessApproval/{entityId} | GET | PaginatedResults<AccessApproval> | parent Entity's READ permission |
| delete AccessApproval | /accessApproval/{accessApprovalid} | DELETE | -- | parent Entity's CHANGE_PERMISSION permission |
...