Edit Access Rights
cascade_edit_access_rightsModify access rights (ACL) for a Cascade asset, replacing the entire ACL. Optionally propagate changes to all descendants for folders or containers.
Instructions
Modify access rights (ACL) for a Cascade asset. Optionally apply to all descendants.
Replaces the asset's ACL wholesale — include every user/group you want to keep; anyone omitted loses their explicit entry and falls back to allLevel. For folders or containers, setting applyToChildren: true propagates the new ACL recursively. Typical workflow: call cascade_read_access_rights first to get the current ACL, modify the array, then pass it here.
Args:
identifier (object, required): The asset whose ACL to modify
id (string, optional): Asset ID (preferred)
path (object, optional): { path, siteId OR siteName }
type (string, required): Entity type of the asset
accessRightsInformation (object, required):
aclEntries (array, optional): Full explicit ACL. Each entry: { name, type: "user"|"group", level: "read"|"write", id? }; include id for group entries when Cascade provides it.
allLevel (string): Default for everyone not listed. One of "none" | "read" | "write".
applyToChildren (boolean, optional): For containers only. Default false. Propagates the ACL to all descendants.
Returns: Cascade OperationResult: { success: true } On failure: { success: false, message: "" }
Examples:
Use when: "Grant group 'editors' write access" -> { identifier: { type: "folder", id: "..." }, accessRightsInformation: { aclEntries: [{ name: "editors", type: "group", level: "write" }], allLevel: "read" } }
Use when: "Lock a folder tree down" -> pass applyToChildren: true alongside the restricted ACL.
Don't use when: You only want to read — use cascade_read_access_rights.
Don't use when: You want to change workflow policy — use cascade_edit_workflow_settings.
Error Handling:
"Asset not found" when the identifier doesn't resolve
"User/group not found" when an aclEntries name is invalid
"Permission denied" when credentials lack admin/edit-acl rights. Responses are JSON text; structuredContent is authoritative when the response fits. Oversized responses return bounded _cache metadata for cascade_read_response. For cascade_read, read_mode controls preview versus raw Cascade payload shape.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| identifier | No | The asset or container whose access rights to modify. | |
| accessRightsInformation | No | REQUIRED: Complete access rights payload matching Cascade's AccessRightsInformationSend shape. | |
| applyToChildren | No | Apply these rights to child assets/containers (default: false). Only meaningful for folders and containers. |