Get role details

GET 
/roles/:id

Returns the full detail of a single role, including RoleConsolidatedPermissions: the effective permission set after expanding the transitive dependencies of RolePermissions. That field is always computed and cannot be requested or suppressed.

The caller must be attached to the role or be one of its role managers, unless the request carries Super Admin context.

Note that an unknown role id is reported as HTTP 500, not 404 or 400, because the handler raises it as a backend exception.

Request

Responses

200

Role details.

Response Headers

Access-Control-Allow-Origin
Access-Control-Allow-Methods
Access-Control-Allow-Headers

400

Authorization failure. Body is {"Message": " - "}. Codes: AUTH-1011 (the caller is neither attached to the role nor a role manager), AUTH-1001 / AUTH-1003 / AUTH-1030 / IPV-1002 (authorization on the role_id header), GE-1008 (a stored permission entry could not be parsed).

Response Headers

Access-Control-Allow-Origin
Access-Control-Allow-Methods
Access-Control-Allow-Headers

500

Backend failure. Also returned when the role id in the path does not exist: the handler raises IPV-1002 as a backend exception, so a missing role surfaces here rather than as a 400 or 404. Body is {"Message": " - "}.

Response Headers

Access-Control-Allow-Origin
Access-Control-Allow-Methods
Access-Control-Allow-Headers