---
title: "POST /api/permissions/exceptions"
method: POST
path: "/api/permissions/exceptions"
tags: ["Permissions"]
---

# POST /api/permissions/exceptions

`POST /api/permissions/exceptions`

Share (allow) or deny a specific record for a user. Deny wins; sharing a denied record is rejected.

## Request body

- object
  - `userId` string, required
  - `permission` string, required
  - `resourceType` string, required
  - `resourceId` string, required
  - `effect` 'allow' | 'deny', required

## Response `200`

Default Response

- object
  - `metadata` object, required
    - `success` boolean, required — True when the request succeeded.
  - `data` object, required
    - `ok` boolean, required

## Other responses

- `409` — Default Response

---

[API](https://skmtc.net/retraced/apis/api-reference.md) · [All operations](https://skmtc.net/retraced/apis/api-reference/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/retraced/api-reference/revisions/60d6c901bc4e/schema)