Handler role gating (generated)¶
Server-side role requirements declared on API handler actions in the 3.7.3 module via the requiresRole annotation, enforced by roleAspect (see security settings for the security.enforceRoleAnnotations switch). A caller passes when they hold any of the listed role tokens.
504 actions scanned — 143 role-gated, 361 not yet annotated.
Gated actions¶
| Handler | Action | Requires any of | Audit label |
|---|---|---|---|
| admin | createBlogPermissions |
edit | — |
| admin | updateTenders |
edit | — |
| avatar | edit |
edit | — |
| avatar | doEdit |
edit | Edit Avatar |
| blog | delete |
admin | Delete Blog Post |
| blog | save |
edit | Save Blog Post |
| branch | getCompanyBranches |
view | View Branches |
| branch | getBranch |
view | View Branch Detail |
| branch | save |
edit | Edit Branch |
| branch | delete |
admin | Delete Branch |
| calendar | setStatus |
edit | — |
| calendar | save |
edit | Saved Calendar |
| calendar | addRecipients |
edit | — |
| calendar | delete |
admin | Delete Event |
| calendar | removeRecipient |
admin | — |
| campaign | delete |
admin | — |
| campaign | removeRecipient |
admin | Remove Email Campaign Recipient |
| campaign | addRecipients |
edit | Add Email Campaign Recipients |
| campaign | save |
edit | Save Email Campaign |
| cmt | save |
edit | — |
| comment | delete |
admin | Delete comment |
| comment | upload |
edit | Upload Comment Attachment |
| comment | add |
edit | Add Comment |
| company | save |
edit | Save Company |
| company | deleteCompany |
admin | Delete Company |
| company | updateMemberMapping |
edit | — |
| company | importMemberMappings |
edit | — |
| contact | save |
edit | Save Contact |
| contact | saveSetttings |
edit | — |
| contact | archive |
edit | Archive Contact |
| contact | delete |
admin | Delete Contact |
| contact | removePermissions |
admin | Remove Contact permissions |
| contact | resetPassword |
edit | Reset Password |
| documentation | save |
edit | — |
| documents | categorySave |
edit | Save Folder |
| documents | upload |
edit | Upload Document |
| documents | clone |
edit | Cloned Document |
| documents | importFile |
edit | — |
| documents | delete |
admin | Delete Document |
| documents | deleteFolder |
admin | Delete Folder |
| documents | save |
edit | Save Document |
| documents | reject |
edit | Reject Document |
| documents | updateStatus |
edit | Update Document Status |
| documents | approve |
edit | Approve Document |
| groups | saveMeta |
edit | Save Group Meta |
| groups | createGroup |
edit | Save Group Meta |
| groups | delete |
admin | Delete Group |
| groups | deleteFromGroup |
admin | Remove from Group |
| groups | move |
edit | Move Group |
| groups | renameGroup |
edit | Rename Group |
| groups | addToGroup |
edit | Add to Group |
| import | importSuppliers |
edit | — |
| jira | updateState |
edit | Update Ticket Status |
| jira | updatePriority |
edit | Update Ticket Priority |
| jira | updateType |
edit | Update Ticket Type |
| login | savesecret |
edit | — |
| login | updatePassword |
edit | — |
| login | resetPassword |
edit | — |
| pim | upload |
edit | Upload PIM File |
| pim | saveChange |
edit | Save PIM Product |
| pim | deleteExportTemplate |
admin | Delete Export Template |
| pim | updatePricesManual |
edit | — |
| pim | toggleDigest |
edit | — |
| pim | saveExportMappings |
edit | Save PIM Export Mapping |
| pim | deletePrices |
admin | Delete Product Prices |
| pim | deleteProducts |
admin | Delete Products |
| pim | saveMappings |
edit | — |
| pim | discontinueSelected |
edit | Discontinue PIM Products |
| pim | deleteSelected |
admin | Discontinue PIM Products |
| pim | activateSelected |
edit | Activaate PIM Products |
| pim | applyPricesSelected |
edit | — |
| psa | addTurnoverStream |
edit | Add Turnover Stream |
| psa | deleteTurnoverStream |
admin | Delete Turnover Stream |
| psa | addChain |
edit | Add Chained Agreement |
| psa | updateTags |
edit | Change Agreement TAGS |
| psa | deleteChain |
admin | Delete Chained Agreement |
| psa | deleteDeal |
admin | Delete Agreement |
| psa | updateDeal |
edit | Update Agreement |
| psa | updateInputStreamCode |
edit | — |
| psa | importInputStreamMappings |
edit | — |
| psa | setCategories |
edit | Set Deal Categories |
| psa | validate |
edit | Validate Deal |
| psa | clone |
edit | Clone Agreement |
| psa | applyTemplate |
edit | Apply Template |
| psa | emailNegotiator |
edit | Email Deal to Negotiator |
| psa | emailSupplier |
edit | Email Deal to Supplier |
| quickbooks | reset |
edit | — |
| quickbooks | addCompany |
edit | — |
| rebate | merge |
edit | Merge Rebates |
| rebate | distribute |
edit | Distribute Rebate |
| rebate | schedule |
edit | Schedule Payment |
| rebate | delete |
admin | — |
| rebate | markPaid |
edit | Mark Rebate Received |
| rebate | save |
edit | Save Manual Rebate |
| review | createReviewRequest |
edit | — |
| review | submitReview |
edit | — |
| review | deleteReview |
admin | — |
| review | createSurvey |
edit | Save Deal review |
| rfp | copyExternal |
edit | — |
| rfp | createRFP |
edit | Create Payment Request |
| rfp | createMultiRFP |
edit | Create MultiLine Payment Request |
| rfp | bulkSend |
edit | Bulk Send Payment Request(s) |
| rfp | send |
edit | Send Payment Request(s) |
| rfp | save |
edit | Save Payment Request(s) |
| rfp | delete |
admin | Delete Payment Request |
| security | savePermissions |
edit | Save Permissions |
| signoff | doSign |
edit | Sign Off Agreement |
| site | create |
edit | — |
| site | createLiteSite |
edit | — |
| site | save |
edit | — |
| site | saveSettings |
edit | Save Site Settings |
| spend | flag |
edit | Flag Turnover |
| spend | doQuery |
edit | Query Turnover |
| spend | resolve |
edit | Resolve Turnover Query |
| spend | confirmAmmendments |
edit | Confirm Turnover Amendment |
| spend | rejectAmmendments |
edit | Reject Turnover Amendment |
| spend | upload |
edit | Upload Turnover |
| spend | submit |
edit | Submit Turnover |
| spend | wipe |
admin | Wipe Turnover |
| spend | reclassifyErpLine |
edit | Reclassify ERP Stream |
| survey | addRecipients |
edit | — |
| survey | removeRecipient |
admin | — |
| survey | deleteSurvey |
admin | — |
| survey | save |
edit | Save Survey |
| survey | remindNotification |
edit | Send Survey Reminder |
| survey | submit |
edit | Submit Survey Answers |
| tags | deleteTagReference |
admin | Delete tag |
| task | create |
edit | Create Task |
| task | update |
edit | Update Task |
| task | delete |
admin | Delete Task |
| task | complete |
edit | Complete Task |
| task | claim |
edit | Claim Task |
| task | cancel |
edit | Cancel Task |
| task | addComment |
edit | Add Task Comment |
| tender | archive |
edit | Save Tender |
| tender | createDeal |
edit | Create Deal from Tender |
| tender | saveTenderAnswers |
edit | Save Answers |
| tender | control |
edit | Control Tender |
| tender | delete |
admin | Delete Tender |
| tender | generateITT |
edit | Generate Tender Documents |
| tender | save |
edit | Save Tender |
| tender | upload |
edit | Upload Tender Document |
| watching | savePreferences |
edit | — |
Not yet annotated¶
These actions carry no requiresRole yet. Under the current opt-in rollout they are not role-gated server-side; add an annotation as each is reviewed.
admin.checkDealPermissionsadmin.autoCreate2admin.getMetaDataadmin.fix43sadmin.oldDateRestrictionsadmin.fixDGGroupadmin.fixLinearadmin.fixMemberRestrictionsadmin.fixDateRestrictionsadmin.fixPromosadmin.doProjectionsadmin.runTaskadmin.getScheduleadmin.dataSyncadmin.migrateIndexaudit.getaudit.getRecentDealsaudit.feedaudit.searchaudit.userReportauth.indexauth.logoutauth.msAuthauth.gAuthauth.signupauth.getDetailsavatar.indexavatar.companyavatar.pathImageavatar.loadblog.listblog.detailblog.getCategoriesblog.viewDigestbranch.searchcalendar.listcalendar.recipientscalendar.detailcampaign.webhookcampaign.viewcampaign.rdcampaign.trackcampaign.sendcampaign.testcampaign.listcampaign.indexCampaigncampaign.indexcampaign.templatescampaign.recipientschat.authchat.userTypingchat.seenChatchat.userTypingchat.startStreamchat.sendChatchat.historychat.getRecentChatscmt.getCMTScmt.getCMTcmt.getReviewcomment.getRelatedCommentscomment.getCommentscompany.getCompanycompany.getCompanyByNamecompany.getCompanyOfTypecompany.getCompaniescompany.scoreDatacompany.getMemberMappingscompany.getMemberMappingSuggestionscompany.exportMemberMappingscompany.scoreCardcontact.getCurrentUsercontact.getLinkedAccountscontact.listcontact.linkedIncontact.linkedInResponsecontact.currentUsercontact.getContactscontact.queriescontact.queryBuilderDatacontact.listContactscontact.getContactSettingscontact.categoryTreecontact.switchToContactcontact.getContactsOfCompanyTypecontact.getContactsOfCompanycontact.indexContactcontact.bootUsercrm.commentsdashboard.getDashboardLayoutdashboard.memberBIDatadashboard.chartDatadashboard.supplierDealsdashboard.supplierRebateDuedashboard.supplierRebateProjectionsdashboard.supplierProjectionsdashboard.supplierDocumentsdashboard.supplierSalesHeatmapdocumentation.getTopicsdocumentation.getTopicdocumentation.menudocuments.relateddocuments.unpackdocuments.indexDocumentdocuments.thumbnaildocuments.categorydocuments.documentdocuments.checkdocuments.relatedFixdocuments.inlinedocuments.searchdocuments.downloaddocuments.findLinkabledocuments.recentlyapprovedemail.getEmailemail.getEmailsemail.getInboxAggregationsemail.getAttachmentsemail.downloadexport.logosexport.dealsexport.commentsexport.reviewsexport.companiesexport.contactsexport.branchesexport.CMBCexport.psasexport.grebatesexport.spendexport.downloadfeed.feedDatagroups.staticGroupsgroups.listgroups.getgroups.getRelationshipgroups.treehealthcheck.getLogshealthcheck.getFailureshealthcheck.getFailuresByApphealthcheck.getFailuresByInstancehealthcheck.getFailureDetailshealthcheck.getFailuresByStatusCodehealthcheck.getTimeoutshealthcheck.getTimeoutAnalysishealthcheck.getResponseTimeshealthcheck.listLogshealthcheck.listFailureshealthcheck.listTimeoutshealthcheck.getAuditStatshealthcheck.weeklyReporthealthcheck.getSummaryhelp.getHelpindex.indexindexer.indexDocumentindexer.doIndexAllindexer.indexCommentsjira.listjira.detailjira.canonicalFieldsjira.overviewjira.subsystemsjira.exportlogin.indexlogin.doLoginlogin.statusChecklogin.authQRlogin.logoutlogin.checkKeymsauth.loginmsauth.indexnmbs.popularProductsnmbs.getSalesBySupplierAndProductnmbs.reportBuildernotifications.getINotificationsnotifications.dismissNotificationnotifications.getRecentNotificationsnotifications.dismissAllNotificationsnotifications.getSummaryopenAI.summaryTextopenAI.docReadpim.validateFilepim.getImportMappingspim.calendarpim.getFileColumnspim.doDeDupepim.priceComparepim.priceCompareExportpim.getSupplierspim.getZonespim.getPriceDatespim.completenessDatapim.exportSetuppim.updatespim.getExportMappingListpim.getExportMappingspim.hasImportMappingspim.getParentDealpim.checkPopularpim.exportComparisonpim.analysePricespim.indexpim.imagepim.importReportpim.detailpim.outOfDatePricespim.outOfDatePrices2pim.searchPricespim.apipim.downloadpim.indexSelectedpim.indexDataSetpim.indexSupplierProductspim.doImportpim.nightlypim.indexProductspim.checkIndexpim.importDonepim.flattenAllProductspim.indexAllProductspromotions.listpromotions.conferencepsa.getPSApsa.getPSADocumentspsa.getDealspsa.getVersionspsa.getSuppliersWithActiveDealpsa.getVersionpsa.getPricespsa.getKeyDocumentspsa.getPromotionspsa.getInputTypespsa.exportInputStreamMappingspsa.treepsa.pdfpsa.getDealUserspsa.categoryTreepsa.doSearchpsa.indexPSApsa.getInputStreamMappingsquickbooks.authquickbooks.testquickbooks.oauth2quickbooks.indexquickbooks.agedDebtquickbooks.getTaxCodesquickbooks.balancesquickbooks.statementquickbooks.transactionsquickbooks.paymentsquickbooks.paymentsDataquickbooks.invoicesDataquickbooks.getInvoicequickbooks.incomingrebate.calcIssuesrebate.exportrebate.agedDebtrebate.swotrebate.rebateDatarebate.remittancerebate.detailrebate.dashboardrebate.indexRebatesrebate.calendarrebate.reportBuilderrebate.targetrebate.dealSummaryrebate.dealEarningsrebate.simulaterebate.calculateAllrebate.calculateRebaterebate.targettingrebate.negotiationQualityreview.reviewDatareview.reviewCommentsreview.getReviewParticipantsrfp.downloadrfp.checkQBrfp.rebategetRFPrfp.relatedrfp.searchrfp.viewscheduler.getSchedulesscheduler.getSchedulescheduler.runTaskscheduler.getTaskByRefsearch.contactssearch.allsecurity.getBasicPermissionssecurity.getPermissionssignUp.testsignoff.indexsignoff.getsignoff.getNegotiatorsignoff.detailsite.getSitesite.getSitessite.autoCreate2spend.NMBSMatchspend.getLinespend.indexItemspend.indexDealSpendspend.turnoverPositionspend.getAmmendmentspend.ammendmentsspend.queryDataspend.getExternalSummaryspend.getNMBSSummaryspend.sendReminderspend.returnsspend.dodataTablesStructspend.getNMBSInvoicesspend.handsonDataspend.entrySpreadsheetspend.positionChartDataspend.projectionAccuracyspend.calendarProjectionsspend.getErpLinesspend.getSupplierSpendspend.companySpendSummaryspend.calendarspend.reportBuilderstats.activityChartMonthsurvey.listsurvey.getDCQ2Resultssurvey.recipientssurvey.getResponsessurvey.templateListsurvey.indextags.searchtags.listtags.getRelatedTagstags.getTagstask.listtask.showtask.myTaskstask.byRelatedtask.runReminderstender.detailtender.listtender.comparetender.completetender.indexTendertender.fixTenderDocstender.doPSABasedOntender.starttest.testSchedulerCachetest.gethosttickets.checkMailtickets.listtickets.getwatching.getWatcherswatching.startwatching.stopwatching.getPreferenceswhatif.censuswhatif.paritywhatif.evaluatewhatif.scenariowhatif.resultwhatif.linearReport