Overview

Permissions provide a way to limit which areas of your API that a user may be used to access. For example, you want to limit access from your user to insert record to your PostgreSQL database but give him access to read.

Assigning permissions

You can enable user permissions when register user through the register endpoint of Authentication API or when creating an API Token.

Wildcard Permissions

SlashApi supports the concept of multiple levels of permission matching. For example, you want to grant a user the permission to access all permission in PostgreSQL API. Instead of assign each available permission in the API, you can use wildcard permission like this: pgsql:* or * to give user access to all your active APIs.

Available Permissions

This table shows the list of available permissions that you can used to limit access for your users.

AWS S3

Permission
Description
aws-s3:read
Read data from your AWS S3 account
aws-s3:upload
Upload file to your AWS S3 account
aws-s3:delete
Delete data from your AWS S3 account

Airtable

Permission
Description
airtable:read
Get Records
airtable:create
Create Records
airtable:update
Update Records
airtable:delete
Delete Records

Azure Blob Storage

Permission
Description
azure:read
Read data from your Azure Blob Storage account
azure:upload
Upload file to your Azure Blob Storage account
azure:delete
Delete data from your Azure Blob Storage account

DNS Record

Permission
Description
dns:get-records
Get DNS Records

DigitalOcean Spaces

Permission
Description
spaces:read
Read data from your DigitalOcean Spaces account
spaces:upload
Upload file to your DigitalOcean Spaces account
spaces:delete
Delete data from your DigitalOcean Spaces account

Dropbox

Permission
Description
dropbox:read
Read data from your dropbox account
dropbox:upload
Upload file to your dropbox account
dropbox:delete
Delete data from your dropbox account

FTP

Permission
Description
ftp:read
Read data from your FTP server
ftp:upload
Upload file to your FTP server
ftp:delete
Delete data from your FTP server

Google Calendar

Permission
Description
google-calendar:calendar-lists
Get calendar lists
google-calendar:get-event
Get calendar events
google-calendar:create-event
Create event
google-calendar:update-event
Update event
google-calendar:delete-event
Delete event

Google Sheets

Permission
Description
google-sheets:read
Read google sheet data
google-sheets:add-sheet
Add new sheet
google-sheets:delete-sheet
Delete Sheet
google-sheets:add-rows
Add new rows
google-sheets:update-row
Update row
google-sheets:delete-row
Delete row

MongoDB

Permission
Description
mongodb:read
Read record
mongodb:create
Create record
mongodb:update
Update Record
mongodb:delete
Delete Record

MySql

Permission
Description
mysql:read
Read record
mysql:create
Create record
mysql:update
Update Record
mysql:delete
Delete Record

OCR

Permission
Description
ocr:extract-text
Extract text from image

PDF

Permission
Description
pdf:generate
Generate PDF

PostgreSQL

Permission
Description
pgsql:read
Read record
pgsql:create
Create record
pgsql:update
Update Record
pgsql:delete
Delete Record

QR Code Generator

Permission
Description
qr-code:generate
Generate QR Code

SFTP

Permission
Description
sftp:read
Read data from your SFTP server
sftp:upload
Upload file to your SFTP server
sftp:delete
Delete data from your SFTP server

Scaleway Object Storage

Permission
Description
scaleway:read
Read data from your Scaleway Object Storage account
scaleway:upload
Upload file to your Scaleway Object Storage account
scaleway:delete
Delete data from your Scaleway Object Storage account

Slack

Permission
Description
slack:send-notification
Send notification to Slack channel

Telegram Bot

Permission
Description
telegram:send-text
Send text message
telegram:send-location
Send location data
telegram:send-photo
Send photo data
telegram:send-document
Send document data
telegram:send-audio
Send audio data
telegram:send-voice
Send voice data

Twilio

Permission
Description
twilio:send-sms
Send outgoing message

Twitter

Permission
Description
twitter:get-tweets
Get Tweets
twitter:post-tweet
Post Tweet

Website Screenshot

Permission
Description
screenshot:take-screenshot
Take Screenshot

XML Parser

Permission
Description
xml-to-json:convert
Convert XML to JSON