Skip to content

KesselInventoryService_CheckForUpdateBulk

POST
/api/kessel/v1beta2/checkforupdatebulk

Performs bulk strongly consistent “check for update” permission checks.

This API is more efficient than making individual CheckForUpdate calls when verifying update permissions for multiple resource-subject-relation combinations. Each item is evaluated with strong consistency (same semantics as CheckForUpdate).

Common use cases include batch pre-authorization before bulk update or delete operations.

CheckForUpdateBulkRequest allows checking multiple “can subject update resource?” permissions in a single request. Each check is strongly consistent (same semantics as CheckForUpdate). This is more efficient than making individual CheckForUpdate calls when verifying update permissions for multiple resource-subject-relation combinations.

object
items
Array<object>

CheckBulkRequestItem represents a single permission check in a bulk request.

object
object
object
resourceType
string
resourceId
string
reporter
object
type
string
instanceId
string
relation
string
subject

A reference to a Subject or, if a relation is provided, a Subject Set.

object
relation

An optional relation which points to a set of Subjects instead of the single Subject. e.g. “members” or “owners” of a group identified in subject.

string
resource
object
resourceType
string
resourceId
string
reporter
object
type
string
instanceId
string

OK

CheckForUpdateBulkResponse contains the results of all check-for-update checks in the request.

object
pairs
Array<object>

CheckForUpdateBulkResponsePair associates a request item with its corresponding result.

object
request

CheckBulkRequestItem represents a single permission check in a bulk request.

object
object
object
resourceType
string
resourceId
string
reporter
object
type
string
instanceId
string
relation
string
subject

A reference to a Subject or, if a relation is provided, a Subject Set.

object
relation

An optional relation which points to a set of Subjects instead of the single Subject. e.g. “members” or “owners” of a group identified in subject.

string
resource
object
resourceType
string
resourceId
string
reporter
object
type
string
instanceId
string
item

CheckForUpdateBulkResponseItem represents the result of a single check-for-update.

object
allowed
string format: enum
Allowed values: ALLOWED_UNSPECIFIED ALLOWED_TRUE ALLOWED_FALSE
error

The Status type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by gRPC. Each Status message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the API Design Guide.

object
code

The status code, which should be an enum value of [google.rpc.Code][google.rpc.Code].

integer format: int32
message

A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the [google.rpc.Status.details][google.rpc.Status.details] field, or localized by the client.

string
details

A list of messages that carry the error details. There is a common set of message types for APIs to use.

Array<object>

Contains an arbitrary serialized message along with a @type that describes the type of the serialized message.

object
@type

The type of the serialized message.

string
key
additional properties
any
consistencyToken
object
token
string

Default error response

The Status type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by gRPC. Each Status message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the API Design Guide.

object
code

The status code, which should be an enum value of [google.rpc.Code][google.rpc.Code].

integer format: int32
message

A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the [google.rpc.Status.details][google.rpc.Status.details] field, or localized by the client.

string
details

A list of messages that carry the error details. There is a common set of message types for APIs to use.

Array<object>

Contains an arbitrary serialized message along with a @type that describes the type of the serialized message.

object
@type

The type of the serialized message.

string
key
additional properties
any