Chelabase
ManagementMembers

Read a project's access log

GET
/v1/projects/{id}/access-events

The access changes on this project (its grants and its databases' overrides), newest first.

Authorization

bearer
AuthorizationBearer <token>

In: header

Path Parameters

id*string

Project id

Formatuuid

Query Parameters

before?integer

Only events older than this id (next_before of the previous page)

Formatint64
limit?integer

1 to 200 (default 50)

Formatint32
Range0 <= value
member_id?string

Only events whose target or actor is this member

Formatuuid

Response Body

application/json

application/json

application/json

application/json

application/json

application/json

curl -X GET "https://example.com/v1/projects/497f6eca-6276-4993-bfeb-53cbbbba6f08/access-events"
{  "events": [    {      "action": "string",      "actor_email": "string",      "actor_member_id": "9fab5e09-6d31-43b2-ad9f-664e3f186c93",      "after": {},      "at": "2019-08-24T14:15:22Z",      "before": {},      "branch_id": "7a4e8e99-89f2-4a0f-b66c-fc595dda2dbc",      "database_id": "91088904-0b92-46ad-9240-e1afa0da22df",      "id": 0,      "project_id": "405d8375-3514-403b-8c43-83ae74cfe0e9",      "project_name": "string",      "target_email": "string",      "target_member_id": "10d938da-5c15-494f-b4dc-970b5a5021ef"    }  ],  "next_before": 0}

Suspend a member POST

The member is refused everywhere but `GET /v1/me` (`member_suspended`) and keeps their grants. Their personal Postgres logins are revoked at once (the proxies forget them), their member roles get new passwords on every branch they reach (open sessions end), and realtime drops what they watched, all in this request. When they are an active member of no other tenant, their account's sessions end too; otherwise those sessions stay, and minting a token for this tenant is refused. The account isn't banned. Suspending a suspended member again writes nothing new; every other step is redone.

List a project's grants GET

Every member's grant on the project (an invited member's counts once they accept), with its overrides on the project's databases. Tenant admins are admin everywhere without a grant.