Read Access Rights
cascade_read_access_rightsCheck who has read or write access to a Cascade asset by retrieving its ACL entries and default permission level.
Instructions
Read access rights (users/groups + permission levels) for a Cascade asset.
Returns the complete ACL (access control list) for an asset: which users and groups can read or write it, and what the default level is for everyone else. Access levels are "none", "read", and "write" for allLevel, and "read" or "write" for explicit ACL entries. Useful for auditing permissions before sharing content or before a bulk edit.
Args:
identifier (object, required): The asset whose ACL to read
id (string, optional): Asset ID (preferred)
path (object, optional): { path, siteId OR siteName }
type (string, required): Entity type of the asset
Returns: Cascade OperationResult: { success: true, accessRightsInformation: { identifier: { ... }, aclEntries: [ { name, type: "user"|"group", level }, ... ], allLevel: "none"|"read"|"write" } } On failure: { success: false, message: "" }
Examples:
Use when: "Who has edit access to /about?" -> { identifier: { type: "folder", path: { path: "/about", siteName: "www" } } }
Use when: "Audit page permissions" -> { identifier: { type: "page", id: "..." } }
Don't use when: You want to change permissions — use cascade_edit_access_rights.
Don't use when: You want workflow settings — use cascade_read_workflow_settings.
Error Handling:
"Asset not found" when the identifier doesn't resolve
"Permission denied" when credentials lack admin/read-acl rights. Responses are JSON text; structuredContent is authoritative when the response fits. Oversized responses return bounded _cache metadata for cascade_read_response. For cascade_read, read_mode controls preview versus raw Cascade payload shape.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| identifier | No | The asset or container whose access rights to read. |