Documentation Index
Fetch the complete documentation index at: /llms.txt
Use this file to discover all available pages before exploring further.
Per-staff grants and revokes layered on top of roles.
effective = (⋃ role.permissions) ∪ override_grants \ override_revokes
(user_id, entity, feature, level).
| Header | Notes |
|---|---|
X-Firm-Entity-Slug | RBAC entity slug for the firm. |
GET /v1/firm-control/staff/overrides?user_id={uuid}
operationId: listStaffOverrides
curl -sS "$TRADARA_BASE_URL/v1/firm-control/staff/overrides?user_id=8e9ad12c-2b1c-4e9a-9d3b-5e6c7a0d1f23" \
-H "X-Tradara-Api-Key: $TRADARA_API_KEY"
200 OK{
"items": [
{
"entity_slug": "firm_acme",
"feature": "emergency_halt",
"level": "write",
"override_type": "grant",
"reason": "on-call rotation"
},
{
"entity_slug": "firm_acme",
"feature": "api_keys",
"level": "write",
"override_type": "revoke",
"reason": "least privilege"
}
]
}
POST /v1/firm-control/staff/overrides
operationId: upsertStaffOverride
Grants or revokes a fine-grained permission override for a staff member. Upsert on the (user_id, entity, feature, level) tuple.
| Field | Required | Notes |
|---|---|---|
user_id | yes | Staff user UUID. |
entity | yes | RBAC entity slug (e.g. firm_acme). |
feature | yes | Permission feature (e.g. emergency_halt). |
level | yes | Permission level (e.g. read, write). |
override_type | no | grant or revoke. Defaults to grant. |
reason | no | Free-form audit note. |
curl -X POST "$TRADARA_BASE_URL/v1/firm-control/staff/overrides" \
-H "X-Tradara-Api-Key: $TRADARA_API_KEY" \
-H "Content-Type: application/json" \
-d '{
"user_id": "8e9ad12c-2b1c-4e9a-9d3b-5e6c7a0d1f23",
"entity": "firm_acme",
"feature": "emergency_halt",
"level": "write",
"override_type": "grant",
"reason": "on-call rotation"
}'
200 OK{ "status": "ok" }
DELETE /v1/firm-control/staff/overrides
operationId: deleteStaffOverride
Removes a permission override from a staff member.
| Field | Required | Notes |
|---|---|---|
user_id | yes | Staff user UUID. |
entity | yes | RBAC entity slug. |
feature | yes | Permission feature. |
level | yes | Permission level. |
curl -X DELETE "$TRADARA_BASE_URL/v1/firm-control/staff/overrides" \
-H "X-Tradara-Api-Key: $TRADARA_API_KEY" \
-H "Content-Type: application/json" \
-d '{
"user_id": "8e9ad12c-2b1c-4e9a-9d3b-5e6c7a0d1f23",
"entity": "firm_acme",
"feature": "emergency_halt",
"level": "write"
}'
200 OK{ "status": "ok" }
| HTTP | Meaning |
|---|---|
400 | Missing required field. |
403 | Caller not permitted to manage overrides in this entity. |
502 | Downstream RBAC service unreachable. |