SelfSubjectRulesReview [api_object]ai-synthesized · conf 0.82
SelfSubjectRulesReview enumerates the set of actions the current user can perform within a namespace. The returned list of actions may be incomplete depending on the server's authorization mode, and any errors experienced during the evaluation. SelfSubjectRulesReview should be used by UIs to show/hide actions, or to quickly let an end user reason about their permissions. It should NOT Be used by external systems to drive authorization decisions as this raises confused deputy, cache lifetime/revocation, and correctness concerns. SubjectAccessReview, and LocalAccessReview are the correct way to defer authorization decisions to the API server.
A review of the rules that apply to a subject, used to check if a user has access to a resource.
Why it matters This allows users to check their own permissions and understand what rules are applied to them.
Key facts - Used in self subject rules reviews - Checks rules that apply to a subject
Related SelfSubjectRulesReviewSpec