# Permissions

> | Action | Permissions |
| --- | --- |
| GET - `/api/attachments/object/{id | Attachments.Read |
| GET - `​/api​/attachments​/{id | Attachments.Read |
| DELETE - `/api/attachments/{id | Attachments.Write |
| PATCH - `/api/attachments/{id | Attachments.Write |
| POST - `/api/attachments/object/{id | Attachments.Write |

## Attachments

| Action | Permissions |
| --- | --- |
| GET - `/api/attachments/object/{id | Attachments.Read |
| GET - `​/api​/attachments​/{id | Attachments.Read |
| DELETE - `/api/attachments/{id | Attachments.Write |
| PATCH - `/api/attachments/{id | Attachments.Write |
| POST - `/api/attachments/object/{id | Attachments.Write |

## Capabilities

| Action | Permissions |
| --- | --- |
| GET - `/api/capabilities/project/{projectId | Capabilities.Read |
| GET - `/api/capabilities/project/{projectId | Capabilities.Read |

## Configuration

| Action | Permissions |
| --- | --- |
| GET - `/api/configuration` | Configuration.Read |

## CustomFieldDefinitions

| Action | Permissions |
| --- | --- |
| GET - `/api/customfielddefinitions/{id | CustomFieldDefinitions.Read |
| DELETE - `/api/customfielddefinitions/{id | CustomFieldDefinitions.Write |
| PUT - `/api/customfielddefinitions/{id | CustomFieldDefinitions.Write |
| PATCH - `/api/customfielddefinitions/{id | CustomFieldDefinitions.Write |
| GET - `/api/customfielddefinitions` | CustomFieldDefinitions.Read |
| POST - `/api/customfielddefinitions` | CustomFieldDefinitions.Write |

## CustomFieldValues

| Action | Permissions |
| --- | --- |
| GET - `/api/customfieldvalues/{id | CustomFieldValues.Read |
| DELETE - `/api/customfieldvalues/{id | CustomFieldValues.Write |
| PUT - `/api/customfieldvalues/{id | CustomFieldValues.Write |
| GET - `/api/customfieldvalues` | CustomFieldValues.Read |
| POST - `/api/customfieldvalues` | CustomFieldValues.Write |

## Defects

| Action | Permissions |
| --- | --- |
| POST - `/api/defects` | Defects.Write |
| GET - `/api/defects/{id | Defects.Read |

## KPIs

| Action | Permissions |
| --- | --- |
| GET - `/api/kpis/project/{id | KPIs.Read |
| GET - `/api/kpis/project/{id | KPIs.Read |
| GET - `/api/kpis/project/{id | KPIs.Read |

## ObjectLabels

| Action | Permissions |
| --- | --- |
| GET - `/api/objectlabels/project/{projectId | ObjectLabels.Read |
| GET - `/api/objectlabels/object/{objectId | ObjectLabels.Read |
| GET - `/api/objectlabels/{id | ObjectLabels.Read |
| POST - `/api/objectlabels/object/{id | ObjectLabels.Write |
| POST - `/api/objectlabels/object/{id | ObjectLabels.Write |

## Orchestrator

| Action | Permissions |
| --- | --- |
| POST - `/api/orchestrator/synchronize` | Orchestrator.Write |
| GET - `/api/orchestrator/testexecution/{id | Orchestrator.Read |
| GET - `/api/orchestrator/testexecution/{id | Orchestrator.Read |
| GET - `/api/orchestrator/testexecution/{id | Orchestrator.Read |
| POST - `/api/orchestrator/automation/{id | Orchestrator.Write |
| GET - `/api/orchestrator/testexecution/{id | Orchestrator.Read |
| GET - `/api/orchestrator/testsets/enabled` | Orchestrator.Read |
| GET - `/api/orchestrator/testsets` | Orchestrator.Read |
| POST - `/api/orchestrator/testsets/{id | Orchestrator.Write |
| GET - `/api/orchestrator/link/{linkId | Orchestrator.Read |

## ProjectReports

| Action | Permissions |
| --- | --- |
| GET - `/api/projectreports/{id | ProjectReports.Read |
| GET - `/api/projectreports/{id | ProjectReports.Read |

## Projects

| Action | Permissions |
| --- | --- |
| GET - `/api/projects` | Projects.Read |
| POST - `/api/projects` | Projects.Write |
| GET - `/api/projects/{id | Projects.Read |
| PUT - `/api/projects/{id | Projects.Write |
| DELETE - `/api/projects/{id | Projects.Write |
| GET - `/api/projects/prefix/{projectPrefix | Projects.Read |

## Requirements

| Action | Permissions |
| --- | --- |
| GET - `/api/requirements` | Requirements.Read |
| POST - `/api/requirements` | Requirements.Write |
| GET - `/api/requirements/{id | Requirements.Read |
| PUT - `/api/requirements/{id | Requirements.Write |
| PATCH - `/api/requirements/{id | Requirements.Write |
| DELETE - `/api/requirements/{id | Requirements.Write |
| GET - `/api/requirements/{id | Requirements.Read |
| GET - `/api/requirements/objkey/{objKey | Requirements.Read |
| POST - `/api/requirements/{id | Requirements.Write |
| POST - `/api/requirements/{id | Requirements.Write |

## ServerInfo

| Action | Permissions |
| --- | --- |
| GET - `/api/serverinfo` | ServerInfo.Read |

## Settings

| Action | Permissions |
| --- | --- |
| GET - `/api/settings/{key | Settings.Read |
| POST - `/api/settings/{key | Settings.Write |

## TestCaseLogs

| Action | Permissions |
| --- | --- |
| GET - `/api/testcaselogs/testexecution/{testExecutionId | TestCaseLogs.Read |
| GET - `/api/testcaselogs/testexecution/{id | TestCaseLogs.Read |
| GET - `/api/testcaselogs/testcase/{testCaseId | TestCaseLogs.Read |
| POST - `/api/testcaselogs/testcase/batch/latest` | TestCaseLogs.Write |
| POST - `​/api​/testcaselogs` | TestCaseLogs.Write |
| POST - `/api/testcaselogs/testexecution/{id | TestCaseLogs.Write |
| POST - `/api/testcaselogs/testexecution/{id | TestCaseLogs.Write |
| POST - `/api/testcaselogs/defect/unlink` | TestCaseLogs.Write |

## TestCases

| Action | Permissions |
| --- | --- |
| GET - `/api/testcases` | TestCases.Read |
| POST - `/api/testcases` | TestCases.Write |
| POST - `/api/testcases/batch` | TestCases.Write |
| GET - `/api/testcases/{id | TestCases.Read |
| PATCH - `/api/testcases/{id | TestCases.Write |
| DELETE - `/api/testcases/{id | TestCases.Write |
| GET - `/api/testcases/automation/{id | TestCases.Read |
| GET - `/api/testcases/objkey/{objKey | TestCases.Read |
| POST - `/api/testcases/{id | TestCases.Write |
| GET - `/api/testcases/{id | TestCases.Read |
| POST - `/api/testcases/{id | TestCases.Write |

## TestExecutions

| Action | Permissions |
| --- | --- |
| GET - `/api/testexecutions/{id | TestExecutions.Read |
| GET - `/api/testexecutions` | TestExecutions.Read |
| POST - `/api/testexecutions` | TestExecutions.Write |
| GET - `/api/testexecutions/{id | TestExecutions.Read |
| GET - `/api/testexecutions/withstats` | TestExecutions.Read |
| POST - `/api/testexecutions/{id | TestExecutions.Write |
| POST - `/api/testexecutions/{id | TestExecutions.Write |
| POST - `/api/testexecutions/{id | TestExecutions.Write |

## TestSets

| Action | Permissions |
| --- | --- |
| GET - `/api/testsets` | TestSets.Read |
| POST - `/api/testsets` | TestSets.Write |
| GET - `/api/testsets/{id | TestSets.Read |
| PUT - `/api/testsets/{id | TestSets.Write |
| PATCH- `/api/testsets/{id | TestSets.Write |
| DELETE - `/api/testsets/{id | TestSets.Write |
| GET - `/api/testsets/objkey/{objKey | TestSets.Read |
| GET - `/api/testsets/{id | TestSets.Read |
| POST - `/api/testsets/{id | TestSets.Write |
| POST - `/api/testsets/{id | TestSets.Write |
| POST - `/api/testsets/{id | TestSets.Write |

## TestSteps

| Action | Permissions |
| --- | --- |
| GET - `/api/teststeps/{id | TestSteps.Read |
| PUT - `/api/teststeps/{id | TestSteps.Write |
| PATCH - `/api/teststeps/{id | TestSteps.Write |
| DELETE - `/api/teststeps/{id | TestSteps.Write |
| GET - `/api/teststeps/testcase/{id | TestSteps.Read |
| GET - `​/api​/teststeps​/testcase​/{testCaseId | TestSteps.Read |
| POST - `/api/teststeps` | TestSteps.Write |
| POST - `/api/teststeps/{id | TestSteps.Write |

## Users

| Action | Permissions |
| --- | --- |
| GET - `/api/users/{id | Users.Read |
| PUT - `/api/users/{id | Users.Write |
| PATCH - `/api/users/{id | Users.Write |
| GET - `/api/users` | Users.Read |
| POST - `/api/users/request-access` | Users.Write |