RESTAPI permission

Hi MLachapelle,

If you search the REST API documentation for "allowed", you'll find numerous methods which can tell you whether a particular action is allowed. For example:

http://lithosphere.lithium.com/t5/rest-api/bd-p/developers-rest-api?leaf-id=Board.messages.view.allowed#Board.messages.view.allowed

However, these methods apply for the current user. Since you're logged in as an admin user, you'll essentially have access to everything. To determine whether "user1" or "user2" are allowed to perform an action, you would instead need to authenticate to the REST API as those respective users.

Since you're already an admin user, it's pretty easy to "switch" to another user via the REST API. You can make a call to login (http://lithosphere.lithium.com/t5/rest-api/bd-p/developers-rest-api?leaf-id=AuthenticationManager.sessions.login#AuthenticationManager.sessions.login) and pass in the desired user's login name (i.e. "user1") and the admin user's session key. This will return a session key for "user1". Then, you can make the necessary calls to the various "allowed" methods mentioned previously.

I hope this helps!