AdminPermissionService

Chatto exposes this service below /api/connect.

Shared message and enum definitions are documented in Shared Types And Enums.

AdminPermissionService

Provides permission matrix reads and admin permission writes.

GetRolePermissionTierMatrix

Gets the role-permission matrix for a single tier. Requires role.manage for server/group scope; room scope requires role.manage or room.manage in that room.

POST /api/connect/chatto.admin.v1.AdminPermissionService/GetRolePermissionTierMatrix

Input: GetRolePermissionTierMatrixRequest

Request a role-permission tier matrix.

Field	Type	Description
scope	PermissionScope	Target scope. Omit or use SERVER for server scope.

Result: GetRolePermissionTierMatrixResponse

Response containing a role-permission tier matrix.

Field	Type	Description
matrix	TierRoles	Requested matrix.

GetRolePermissionMatrix

Gets one role’s full permission matrix. Requires role.manage. Returns NOT_FOUND when the role does not exist.

POST /api/connect/chatto.admin.v1.AdminPermissionService/GetRolePermissionMatrix

Input: GetRolePermissionMatrixRequest

Request one role’s permission matrix.

Field	Type	Description
role_name	string	Stable role name.

Result: GetRolePermissionMatrixResponse

Response containing one role’s permission matrix.

Field	Type	Description
matrix	RolePermissionMatrix	Requested matrix.

ListRolePermissionDecisions

Lists one role’s permission decisions as resource-oriented rows. Requires role.manage. Returns NOT_FOUND when the role does not exist.

POST /api/connect/chatto.admin.v1.AdminPermissionService/ListRolePermissionDecisions

Input: ListRolePermissionDecisionsRequest

Request explicit/effective permission decisions for one role.

Field	Type	Description
role_name	string	Stable role name.

Result: ListRolePermissionDecisionsResponse

Resource-oriented permission decisions for one role.

Field	Type	Description
role_name	string	Stable role name.
decisions	repeated ScopedPermissionDecision	Permission decisions keyed by permission and typed scope.

GetUserPermissionMatrix

Gets one user’s full permission matrix. Requires user.manage-permissions. Returns NOT_FOUND when the user does not exist.

POST /api/connect/chatto.admin.v1.AdminPermissionService/GetUserPermissionMatrix

Input: GetUserPermissionMatrixRequest

Request one user’s permission matrix.

Field	Type	Description
user_id	string	User ID.

Result: GetUserPermissionMatrixResponse

Response containing one user’s permission matrix.

Field	Type	Description
matrix	UserPermissionMatrix	Requested matrix.

ListUserPermissionDecisions

Lists one user’s permission decisions as resource-oriented rows. Requires user.manage-permissions. Returns NOT_FOUND when the user does not exist.

POST /api/connect/chatto.admin.v1.AdminPermissionService/ListUserPermissionDecisions

Input: ListUserPermissionDecisionsRequest

Request explicit/effective permission decisions for one user.

Field	Type	Description
user_id	string	User ID.

Result: ListUserPermissionDecisionsResponse

Resource-oriented permission decisions for one user.

Field	Type	Description
user_id	string	User ID.
decisions	repeated ScopedPermissionDecision	Permission decisions keyed by permission and typed scope.

ExplainPermissions

Explains permission resolution for another user. Requires role.manage.

POST /api/connect/chatto.admin.v1.AdminPermissionService/ExplainPermissions

Input: ExplainPermissionsRequest

Request permission explanations for a user at server or room scope.

Field	Type	Description
user_id	string	User whose permissions should be explained.
room_id	string	Optional room scope. Omit for server-scoped permissions.

Result: ExplainPermissionsResponse

Permission explanations for all permissions applicable at the requested scope.

Field	Type	Description
explanations	repeated PermissionExplanation	Explanation rows sorted by permission metadata order.

SetRolePermission

Sets one role permission decision. Requires role.manage or scoped room.manage for room scope.

POST /api/connect/chatto.admin.v1.AdminPermissionService/SetRolePermission

Input: SetRolePermissionRequest

Request to set one role permission state.

Field	Type	Description
role_name	string	Role name.
permission	string	Permission identifier.
decision	PermissionDecision	New decision. NONE clears the explicit state.
scope	PermissionScope	Target scope. Omit or use SERVER for server scope.

Result: SetRolePermissionResponse

Result of setting one role permission state.

Field	Type	Description
decision	PermissionDecisionUpdate	Updated permission decision for the requested role/scope cell.

SetUserPermission

Sets one user permission decision. Requires user.manage-permissions.

POST /api/connect/chatto.admin.v1.AdminPermissionService/SetUserPermission

Input: SetUserPermissionRequest

Request to set one user permission state.

Field	Type	Description
user_id	string	Target user ID.
permission	string	Permission identifier.
decision	PermissionDecision	New decision. NONE clears the explicit state.
scope	PermissionScope	Target scope. Omit or use SERVER for server scope.

Result: SetUserPermissionResponse

Result of setting one user permission state.

Field	Type	Description
decision	PermissionDecisionUpdate	Updated permission decision for the requested user/scope cell.