save_object_permissions
Replace public permissions and optionally patch this type's slices on platform/website-user roles. Super-admin only. Super-admin role slices are ignored. scopeRelationFieldKey is saved as conditions.see_own, conditions.mutate_own, conditions.see_others, or conditions.mutate_others (field_compare on that key) for each grant that is true. The response omits scopeRelationFieldKey and returns those conditions. public.conditions.view_all may compare a field to a cookie-backed site variable ({ kind: \"site_variable\", name }). That condition applies only when view_all is true. A missing cookie fails closed. Anonymous update and delete follow the same view_all conditions. dryRun validates, returns a leaf diff and risks, and does not write or invalidate caches. public_view_all_unconditional means view_all is true with no view_all conditions, so every row is public.
save_object_permissions · Group: objects
Replace public permissions and optionally patch this type's slices on platform/website-user roles. Super-admin only. Super-admin role slices are ignored. scopeRelationFieldKey is saved as conditions.see_own, conditions.mutate_own, conditions.see_others, or conditions.mutate_others (field_compare on that key) for each grant that is true. The response omits scopeRelationFieldKey and returns those conditions. public.conditions.view_all may compare a field to a cookie-backed site variable ({ kind: "site_variable", name }). That condition applies only when view_all is true. A missing cookie fails closed. Anonymous update and delete follow the same view_all conditions. dryRun validates, returns a leaf diff and risks, and does not write or invalidate caches. public_view_all_unconditional means view_all is true with no view_all conditions, so every row is public.
Inputs
| Field | Required | Notes |
|---|---|---|
websiteId | required | |
objectTypeId | required | |
public | optional | |
platformRoles | optional | |
websiteUserRoles | optional | |
dryRun | optional |
Maps to
PUT /api/v1/{locale}/{websiteId}/objects/{objectTypeId}/permissions→ API