权限

每个用户可能有多个权限。 您可以在他们的个人资料上查看用户的权限。

权限属性

权限具有以下属性：

• 所有者
• 名称
• 创建时间
• 显示名称
• 已启用
• 模型
• Users: An array of users belonging to this permission
• Roles: An array of roles belonging to this permission
• 资源类型
• Resources：资源的数组
• Actions：一个动作数组
• 效果

Managing Permissions via API

Permissions are managed as separate resources in Casdoor. When you retrieve a user object, the Permissions field is populated dynamically by extending the user data with information from the Permissions resource.

To assign or update permissions for users, use the Permissions API endpoints rather than the User API. You can manage permissions through:

1. Web UI: Navigate to the Permissions management page (e.g., https://door.casdoor.com/permissions)
2. API: Use the permission-specific endpoints documented in the Casdoor API reference

The Permission resource allows you to define permissions with specific users and roles assigned to them. When a user is added to a permission's Users array or belongs to a role in the permission's Roles array, that permission will automatically appear in the user's Permissions field when retrieving user data.