Permissions and filters

Every access file contains a list of resources. Resources can be named in the singular (such as Activity) or in the plural (such as Activities).

When a resource is named in the singular, the information that follows applies to endpoints that return individual elements of that resource type. This includes endpoints whose operations are GET (for a single element), POST (for custom business actions), PATCH, and DELETE. For individual elements, there can be only one sections: permissions.

When a resource is named in the plural, the information that follows applies to endpoints that return collections of that resource type. This includes endpoints whose operations are GET (for a collection) and POST. For collections, there can be two sections: permissions and filters.