SelfSubjectAccessReview [page]deterministic
SelfSubjectAccessReview checks whether or the current user can perform an action. Not filling in a spec.namespace means "in all namespaces". Self is a special case, because users should always be able to check whether they can perform an action
`apiVersion: authorization.k8s.io/v1`
`import "k8s.io/api/authorization/v1"`
## SelfSubjectAccessReview {#SelfSubjectAccessReview}
SelfSubjectAccessReview checks whether or the current user can perform an action. Not filling in a spec.namespace means "in all namespaces". Self is a special case, because users should always be able to check whether they can perform an action
<hr>
<table> <thead><tr><th>Field</th><th>Description</th></tr></thead> <tbody> <tr> <td><code>apiVersion</code><br/><em>string</em></td> <td>APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources</td> </tr> <tr> <td><code>kind</code><br/><em>string</em></td> <td>Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</td> </tr> <tr> <td><code>metadata</code><br/><em><a href="">ObjectMeta</a></em></td> <td>metadata is the standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata</td> </tr> <tr> <td><code>spec</code> <strong>*</strong><br/><em><a href="">SelfSubjectAccessReviewSpec</a></em></td> <td>spec holds information about the request being evaluated. user and groups must be empty</td> </tr> <tr> <td><code>status</code><br/><em>SubjectAccessReviewStatus</em></td> <td>status is filled in by the server and indicates whether the request is allowed or not</td> </tr> </tbody> </table>
## SelfSubjectAccessReviewSpec {#SelfSubjectAccessReviewSpec}
SelfSubjectAccessReviewSpec is a description of the access request. Exactly one of resourceAttributes and nonResourceAttributes must be set
<hr>
<table> <thead><tr><th>Field</th><th>Description</th></tr></thead> <tbody> <tr> <td><code>nonResourceAttributes</code><br/><em><a href="">NonResourceAttributes</a></em></td> <td>nonResourceAttributes describes information for a non-resource access request</td> </tr> <tr> <td><code>resourceAttributes</code><br/><em><a href="">ResourceAttributes</a></em></td> <td>resourceAttributes describes information for a resource access request</td> </tr> </tbody> </table>