Semaphor

Validate an assignment update without saving

Merges the partial request with the saved assignment, substitutes it into the saved policy graph exactly once, and validates the result without persisting it. Omitted fields are preserved and a provided params value replaces the complete shared parameter map.

POST
/api/management/v1/projects/{projectId}/unified-security/assignments/{assignmentId}/validate

Authorization

UnifiedSecurityBearerAuth
AuthorizationBearer <token>

A project-scoped access token generated for an organization Admin. Generate one with the Token API using the Admin's orgUserId. The token project must match the request path, and the user must currently be active and belong to the project organization. Dashboard tokens and tenant-user project tokens are not accepted.

In: header

Path Parameters

projectId*string

Your Semaphor project ID.

assignmentId*string

The ID of the assignment to operate on.

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

Response Body

application/json

application/json

application/json

application/json

application/json

application/json

curl -X post "https://semaphor.cloud/api/management/v1/projects/string/unified-security/assignments/string/validate" \  -H "Content-Type: application/json" \  -d '{}'
{
  "ok": true,
  "data": {
    "validation": {
      "status": "VALID",
      "diagnostics": [
        {
          "code": "RLS_CONFIG_SHAPE_INVALID",
          "severity": "ERROR",
          "title": "string",
          "message": "string",
          "location": {
            "resourceType": "DEFINITION",
            "resourceId": "string",
            "resourceName": "string",
            "subjectType": "RULE",
            "fieldPath": "string",
            "parameterName": "string"
          },
          "remediations": [
            {
              "code": "REAUTHOR_LEGACY_RLS",
              "label": "string",
              "target": {
                "resourceType": "DEFINITION",
                "resourceId": "string"
              }
            }
          ],
          "requiresUserDecision": true,
          "retryable": true
        }
      ],
      "impact": {
        "type": "ALL_TENANTS_BASELINE_CHANGE",
        "allOtherTenantActorsRemainActive": true,
        "parameters": [
          {
            "parameterName": "string",
            "oldValue": {
              "state": "OMITTED"
            },
            "newValue": {
              "state": "OMITTED"
            },
            "tenantOverrideAssignmentCount": 0,
            "tenantUserOverrideAssignmentCount": 0
          }
        ]
      },
      "recovery": {
        "action": "SAVE_DEFINITION_AND_REVIEW_ASSIGNMENTS",
        "assignmentIds": [
          "string"
        ]
      }
    },
    "authoringContext": {
      "definitionId": "string",
      "scopeType": "ALL_TENANTS",
      "parameters": [
        {
          "parameterName": "string",
          "currentValue": {
            "state": "OMITTED"
          },
          "inherited": {
            "state": "OMITTED"
          }
        }
      ]
    }
  }
}
{
  "ok": false,
  "error": {
    "code": "INVALID_REQUEST",
    "message": "string",
    "requestId": "string",
    "issues": [
      {
        "code": "INVALID_JSON",
        "fieldPath": "string",
        "message": "string"
      }
    ],
    "retryable": true
  }
}
{
  "ok": false,
  "error": {
    "code": "INVALID_REQUEST",
    "message": "string",
    "details": {}
  }
}
{
  "ok": false,
  "error": {
    "code": "INVALID_REQUEST",
    "message": "string",
    "details": {}
  }
}
{
  "ok": false,
  "error": {
    "code": "INVALID_REQUEST",
    "message": "string",
    "requestId": "string",
    "issues": [
      {
        "code": "INVALID_JSON",
        "fieldPath": "string",
        "message": "string"
      }
    ],
    "retryable": true
  }
}
{
  "ok": false,
  "error": {
    "code": "INVALID_REQUEST",
    "message": "string",
    "requestId": "string",
    "issues": [
      {
        "code": "INVALID_JSON",
        "fieldPath": "string",
        "message": "string"
      }
    ],
    "retryable": true
  }
}