Meta V1

Definitions:

RBAC Permissions

Every Meta V1 operation is authorized against the Authorization V1 service before it runs: the caller’s token must be granted the matching action on the key it targets, via an ArangoPermissionPolicy bound to their role. A denied check fails the request.

Action Resource
meta:GetKey the key being read
meta:UpdateKey the key being written
meta:DeleteKey the key being deleted
meta:ListKey the key prefix being listed

Example policy statement granting read access to keys under config/:

statements:
  - effect: Allow
    actions:
      - "meta:GetKey"
      - "meta:ListKey"
    resources:
      - "config/*"