CodeArts Wiki

The Organizations service provides Service Control Policies (SCPs) to set access control policies.

SCPs do not actually grant any permissions to a principal. They only set the permissions boundary for the principal. When SCPs are attached to a member account or an organizational unit (OU), they do not directly grant permissions to that member account or OU. Instead, SCPs just determine what permissions are available for that member account or the member accounts under that OU.

This section describes the elements used by Organizations SCPs. The elements include actions, resources, and conditions.

For details about how to use these elements to create a custom SCP, see Creating an SCP.

Actions

Actions are specific operations that are allowed or denied in an SCP.

The Access Level column describes how the action is classified (List, Read, or Write). This classification helps you understand the level of access that an action grants when you use it in an SCP.
The Resource Type column indicates whether the action supports resource-level permissions.
- You can use a wildcard (*) to indicate all resource types. If this column is empty (-), the action does not support resource-level permissions, and you must specify all resources ("*") in your SCP statements.
- If this column includes a resource type, you must specify the URN in the Resource element of your statements.
- Required resources are marked with asterisks (*) in the table. If you specify a resource in a statement using this action, then it must be of this type.
For details about the resource types defined by CodeArts Wiki, see Resources.
The Condition Key column contains keys that you can specify in the Condition element of an SCP statement.
- If the Resource Type column has values for an action, the condition key takes effect only for the listed resource types.
- If the Resource Type column is empty (-) for an action, the condition key takes effect for all resources that action supports.
- If the Condition Key column is empty (-) for an action, the action does not support any condition keys.
For details about the condition keys defined by CodeArts Wiki, see Conditions.

The following table lists the actions that you can define in SCP statements for CodeArts Wiki.

**Table 1** Supported actions in CodeArts Wiki
Action	Description	Access Level	Resource Type (*: required)	Condition Key
cloudwiki::access	Permission to access CodeArts Wiki.	write

Each API of CodeArts Wiki usually supports one or more actions. Table 2 lists the supported actions and dependencies.

**Table 2** Actions and dependencies supported by CodeArts Wiki APIs
API	Action	Dependencies
ApigDeleteFile	cloudwiki::access	-
ExternalDeleteFile	cloudwiki::access	-
DeleteVersionFromFile	cloudwiki::access	codeartsworkspace:project:getCreatorAccountActivationStatus
DeleteFileInfoById	cloudwiki::access	-
BatchLogicDeleteFile	cloudwiki::access	codeartsworkspace:project:getCreatorAccountActivationStatus
DeleteFile	cloudwiki::access	-
ApigDownloadFile	cloudwiki::access	-
ExternalDownloadFile	cloudwiki::access	-
PreviewOrDownloadFile	cloudwiki::access	-
GetDownloadTaskList	cloudwiki::access	-
DownloadTaskById	cloudwiki::access	-
GetDownloadTaskById	cloudwiki::access	-
DownloadFiles	cloudwiki::access	codeartsworkspace:project:getCreatorAccountActivationStatus
DeleteDownloadTask	cloudwiki::access	-
MoveFile	cloudwiki::access	-
MoveFileFolder	cloudwiki::access	-
RenameFolder	cloudwiki::access	codeartsworkspace:project:getCreatorAccountActivationStatus
SortFile	cloudwiki::access	-
ExternalGetSubNodesByBelongId	cloudwiki::access	-
ExternalGetChildrenFile	cloudwiki::access	-
ExternalGetFileList	cloudwiki::access	-
ExternalGetMyFileList	cloudwiki::access	-
ExternalGetAmount	cloudwiki::access	-
ExternalGetPrjList	cloudwiki::access	-
ExternalGetFileInfoByDocId	cloudwiki::access	-
GetFileInfoById	cloudwiki::access	-
GetHotFilesPage	cloudwiki::access	-
GetFileHistoryList	cloudwiki::access	-
GetTreeByNodeId	cloudwiki::access	-
GetChildren	cloudwiki::access	-
SearchFiles	cloudwiki::access	-
GetMyCreateFiles	cloudwiki::access	-
GetDriverFileInfoById	cloudwiki::access	-
GetAssociationList	cloudwiki::access	codeartsreq:workitem:list,codeartsreq:workitem:get
GetSubNodesByBelongId	cloudwiki::access	-
ExternalPreviewFile	cloudwiki::access	-
ExternalGetPreviewUrl	cloudwiki::access	-
GetFilePreViewInfo	cloudwiki::access	-
PreviewFile	cloudwiki::access	-
PreviewObsUrl	cloudwiki::access	-
ObsAuthorizeResource	cloudwiki::access	-
AddTenantInviteFromFile	cloudwiki::access	codeartsworkspace:project:getCreatorAccountActivationStatus
GetInviteListByObjIdFromFile	cloudwiki::access	-
GetShareDocHtmlFromFile	cloudwiki::access	-
AddInviteFromFile	cloudwiki::access	codeartsreq:workitem:list,codeartsreq:workitem:get
GetInviteListByTenantFromFile	cloudwiki::access	-
DeleteInviteFromFile	cloudwiki::access	codeartsworkspace:project:getCreatorAccountActivationStatus
PublicTreeFromFile	cloudwiki::access	-
ShareFile	cloudwiki::access	-
UpdateInvitePermission	cloudwiki::access	-
UpdateVersionNameFromFile	cloudwiki::access	codeartsworkspace:project:getCreatorAccountActivationStatus
RecoverVersionFromFile	cloudwiki::access	codeartsworkspace:project:getCreatorAccountActivationStatus
RenameFile	cloudwiki::access	codeartsworkspace:project:getCreatorAccountActivationStatus
UpdateFileParentPath	cloudwiki::access	-
SaveAssociations	cloudwiki::access	codeartsworkspace:project:getCreatorAccountActivationStatus
DeleteAssociations	cloudwiki::access	codeartsworkspace:project:getCreatorAccountActivationStatus
GetMyFavouriteFiles	cloudwiki::access	-
UploadConvertResult	cloudwiki::access	-
ApigUploadFile	cloudwiki::access	-
ExternalUploadFile	cloudwiki::access	-
ExternalPrjUpload	cloudwiki::access	-
FileStore	cloudwiki::access	-
Save	cloudwiki::access	-
BatchGetPreviewLink	cloudwiki::access	-
SaveUpload	cloudwiki::access	codeartsworkspace:project:getCreatorAccountActivationStatus
Upload	cloudwiki::access	codeartsreq:workitem:list,codeartsreq:workitem:get
ValidateFolder	cloudwiki::access	-
SaveFolder	cloudwiki::access	-
UploadFolder	cloudwiki::access	-
CreateFolder	cloudwiki::access	codeartsworkspace:project:getCreatorAccountActivationStatus
DeleteFileFolder	cloudwiki::access	-
DownloadFileFolder	cloudwiki::access	-
AddAttachment	cloudwiki::access	codeartsworkspace:project:getCreatorAccountActivationStatus
GetAttachments	cloudwiki::access	-
DeepCopyChildren	cloudwiki::access	codeartsworkspace:project:getCreatorAccountActivationStatus
CopyDocument	cloudwiki::access	codeartsworkspace:project:getCreatorAccountActivationStatus
CheckTemplatePermission	cloudwiki::access	-
SaveDoc	cloudwiki::access	-
CreateDocByDocSourceAndRedirectEditPage	cloudwiki::access	-
CreateDocAndRedirectEditPage	cloudwiki::access	-
UploadZipFile	cloudwiki::access	-
LogicDeleteDoc	cloudwiki::access	codeartsworkspace:project:getCreatorAccountActivationStatus
BatchLogicDeleteDoc	cloudwiki::access	codeartsworkspace:project:getCreatorAccountActivationStatus
ConvertAndExport	cloudwiki::access	codeartsworkspace:project:getCreatorAccountActivationStatus
JumpDolphinById	cloudwiki::access	-
BatchDownloadDoc	cloudwiki::access	-
ValidateImportDoc	cloudwiki::access	-
ResolveZipFile	cloudwiki::access	-
ImportDoc	cloudwiki::access	-
MoveDocument	cloudwiki::access	-
RenameDocFolder	cloudwiki::access	codeartsworkspace:project:getCreatorAccountActivationStatus
translateText	cloudwiki::access	codeartsreq:report:list,codeartsreq:report:get
GetReportTree	cloudwiki::access	-
GetAllByTreeId	cloudwiki::access	-
GetVersionContentByContentId	cloudwiki::access	-
GetMyFavouriteDocs	cloudwiki::access	-
DoFavourites4Organization	cloudwiki::access	codeartsworkspace:project:getCreatorAccountActivationStatus
BatchDocFavourites	cloudwiki::access	codeartsworkspace:project:getCreatorAccountActivationStatus
GetDocListTitles	cloudwiki::access	-
GetRecentRecords	cloudwiki::access	-
GetRecentRecordDocs	cloudwiki::access	-
GetTreeByZhiShiKuId	cloudwiki::access	-
GetNodeCountByZhiShiKuId	cloudwiki::access	-
GetTreeAncestors	cloudwiki::access	-
GetSons	cloudwiki::access	-
GetBrothers	cloudwiki::access	-
GetTreeBaseInfo	cloudwiki::access	-
GetWidget	cloudwiki::access	-
GetContentHistoryList	cloudwiki::access	-
SearchDocs	cloudwiki::access	-
GetDocPermission	cloudwiki::access	-
GetMyCreateDocs	cloudwiki::access	-
GetLastCreateParent	cloudwiki::access	-
GetTopDocumentsPage	cloudwiki::access	-
GetDocListByProjectId	cloudwiki::access	-
GetMyCreateDocs4OldWiki	cloudwiki::access	-
RemoveRecentRecords	cloudwiki::access	-
SyncWikiInfo	cloudwiki::access	-
GetInviteListByTenantFromDoc	cloudwiki::access	-
GetShareDocHtmlFromDoc	cloudwiki::access	codeartsreq:report:list,codeartsreq:report:get
DeleteInviteFromDoc	cloudwiki::access	codeartsworkspace:project:getCreatorAccountActivationStatus
AddInviteFromDoc	cloudwiki::access	codeartsworkspace:project:getCreatorAccountActivationStatus
GetInviteListByObjIdFromDoc	cloudwiki::access	-
AddTenantInviteFromDoc	cloudwiki::access	codeartsworkspace:project:getCreatorAccountActivationStatus
AddZhishikuInviteFromDoc	cloudwiki::access	-
UpdateInvitePermissionFromDoc	cloudwiki::access	-
ShareFromDoc	cloudwiki::access	-
PublicTreeFromDoc	cloudwiki::access	-
GetReportData	cloudwiki::access	-
GetRelItemObjects	cloudwiki::access	codeartsreq:workitem:list,codeartsreq:workitem:get
GetRelItems	cloudwiki::access	-
GetEditorAuthToken	cloudwiki::access	-
DeleteWidgetById	cloudwiki::access	-
DeleteVersion	cloudwiki::access	codeartsworkspace:project:getCreatorAccountActivationStatus
DeleteDocItem	cloudwiki::access	-
DeleteTag	cloudwiki::access	-
CreateTag	cloudwiki::access	-
UpdateEditorContent	cloudwiki::access	codeartsworkspace:project:getCreatorAccountActivationStatus
UpdateWidget	cloudwiki::access	-
SaveWidget	cloudwiki::access	-
RecoverVersion	cloudwiki::access	codeartsworkspace:project:getCreatorAccountActivationStatus
UpdateVersionNameFromDoc	cloudwiki::access	codeartsworkspace:project:getCreatorAccountActivationStatus
GetDocJoinTag	cloudwiki::access	-
CreateDocJoinTag	cloudwiki::access	codeartsworkspace:project:getCreatorAccountActivationStatus
DeleteDocJoinByDocId	cloudwiki::access	codeartsworkspace:project:getCreatorAccountActivationStatus
RenameDoc	cloudwiki::access	codeartsworkspace:project:getCreatorAccountActivationStatus
ConvertText	cloudwiki::access	-
CreateTags	cloudwiki::access	-
SaveDocItem	cloudwiki::access	-
AtUser	cloudwiki::access	-
ApplayDocEditPermission	cloudwiki::access	-
DeleteAttachment	cloudwiki::access	codeartsworkspace:project:getCreatorAccountActivationStatus
CreateContent	cloudwiki::access	-
CopyDocFolder	cloudwiki::access	-
CreateDocFolder	cloudwiki::access	-
UpdateExtendAttribute	cloudwiki::access	codeartsworkspace:project:getCreatorAccountActivationStatus
DeleteDocFolder	cloudwiki::access	-
SortDoc	cloudwiki::access	-
GetTags	cloudwiki::access	-
MoveDocFolder	cloudwiki::access	-
CopyMailTemplate	cloudwiki::access	-
SaveMailTemplate	cloudwiki::access	codeartsworkspace:project:getCreatorAccountActivationStatus
GetMailTemplateList	cloudwiki::access	-
GetMailTemplatePage	cloudwiki::access	-
GetSendMailPage	cloudwiki::access	-
UpdateMailTemplate	cloudwiki::access	codeartsworkspace:project:getCreatorAccountActivationStatus
SendMailTemplate	cloudwiki::access	-
DeleteMailTemplate	cloudwiki::access	-
DeleteDomainAdmin	cloudwiki::access	-
DeletePrivateMember	cloudwiki::access	-
DeleteMember	cloudwiki::access	-
GetDomainAdmins	cloudwiki::access	-
GetUserInviteListByTenant	cloudwiki::access	-
GetUsersByTenant4Search	cloudwiki::access	-
IsCurrentUserOrgAdmin	cloudwiki::access	-
GetAllMemberByOrgIdPage	cloudwiki::access	-
GetAllAdminsByOrgId	cloudwiki::access	-
SaveMembers	cloudwiki::access	-
SavePrivateMembers	cloudwiki::access	-
SaveFilePrivateMembers	cloudwiki::access	-
SaveDomainAdmin	cloudwiki::access	-
BatchDeleteOrganization	cloudwiki::access	-
LogicDeleteOrg	cloudwiki::access	-
GetMyFavouriteOrganizations	cloudwiki::access	-
DoFavourites4Wiki	cloudwiki::access	codeartsworkspace:project:getCreatorAccountActivationStatus
GetTreeByOrgId	cloudwiki::access	-
GetAllByOrgId	cloudwiki::access	-
VerifyId	cloudwiki::access	-
GetAllOrganization	cloudwiki::access	-
GetOrgId	cloudwiki::access	-
BatchUpdateOrgByIds	cloudwiki::access	-
BatchRecoverOrg	cloudwiki::access	-
SaveOrganization	cloudwiki::access	-
DeleteGlobalRecycleObjects	cloudwiki::access	codeartsworkspace:project:getCreatorAccountActivationStatus
DeleteFiles	cloudwiki::access	codeartsworkspace:project:getCreatorAccountActivationStatus
DeleteDoc	cloudwiki::access	-
CleanRecycle	cloudwiki::access	-
BatchDeleteTeamZskOrDrive	cloudwiki::access	-
CleanCloudDriveRecycle	cloudwiki::access	codeartsworkspace:project:getCreatorAccountActivationStatus
GetRecycleListByPage	cloudwiki::access	-
GetGlobalRecycleListByPage	cloudwiki::access	-
GetGlobalRecycleDeleters	cloudwiki::access	-
GetGlobalRecycleCreators	cloudwiki::access	-
GetRecyclePage	cloudwiki::access	-
RecoverDoc	cloudwiki::access	codeartsworkspace:project:getCreatorAccountActivationStatus
BatchRecoverZskOrDrive	cloudwiki::access	-
RecoverGlobalRecycleObject	cloudwiki::access	codeartsworkspace:project:getCreatorAccountActivationStatus
Recover	cloudwiki::access	codeartsworkspace:project:getCreatorAccountActivationStatus
CreateRole	cloudwiki::access	-
DeleteRole	cloudwiki::access	-
GetRoleList	cloudwiki::access	-
UpdateRole	cloudwiki::access	-
UpdateMemberRole	cloudwiki::access	-
SavePrivateZhiShiKu	cloudwiki::access	codeartsworkspace:project:getCreatorAccountActivationStatus
CreateTeamZskOrDrive	cloudwiki::access	-
SavePrivateDrive	cloudwiki::access	codeartsworkspace:project:getCreatorAccountActivationStatus
LogicDeletePrivateZhiShiKu	cloudwiki::access	codeartsworkspace:project:getCreatorAccountActivationStatus
BatchLogicDeleteZskOrDrive	cloudwiki::access	-
LogicDeletePrivateDrive	cloudwiki::access	codeartsworkspace:project:getCreatorAccountActivationStatus
UpdateMigrateAllStatus	cloudwiki::access	-
ChangeWorkNO	cloudwiki::access	-
GetPrivateDriveById	cloudwiki::access	-
DoFavourites	cloudwiki::access	codeartsworkspace:project:getCreatorAccountActivationStatus
AddOrCancelThumbs	cloudwiki::access	-
GetZskOrDrivePage	cloudwiki::access	-
MigrateSingle	cloudwiki::access	-
DeleteSingle	cloudwiki::access	-
MigrateIncrement	cloudwiki::access	-
MigrateFile	cloudwiki::access	-
GlobalBatchCancelFavourites	cloudwiki::access	codeartsworkspace:project:getCreatorAccountActivationStatus
BatchFileFavourites	cloudwiki::access	codeartsworkspace:project:getCreatorAccountActivationStatus
GetZhiShiKuById	cloudwiki::access	-
GetProjectZhiShiKu	cloudwiki::access	-
GetZhiShiKuList	cloudwiki::access	-
GetGlobalProjectList	cloudwiki::access	-
GetGlobalZhiShiKuList	cloudwiki::access	-
MigrateProjectById	cloudwiki::access	-
InitProjectMigration	cloudwiki::access	-
InitDomainMigration	cloudwiki::access	-
GetThumbsByObjId	cloudwiki::access	-
CheckTenantNameExists	cloudwiki::access	-
CheckTenantNameAndUserNameExists	cloudwiki::access	-
GetTeamsByPage	cloudwiki::access	-
GetZskDriveStatisticsByOrgId	cloudwiki::access	-
GetTeamRecentRecords	cloudwiki::access	-
GetZskDriveMemberQuantityByOrgId	cloudwiki::access	-
GetMyFavouritesInTeam	cloudwiki::access	-
GetMeAndDescendantsPage	cloudwiki::access	-
FullTextSearch	cloudwiki::access	-
GetUsersByTenant	cloudwiki::access	-
SuggestSearch	cloudwiki::access	-
SearchHistory	cloudwiki::access	-
DeleteHistory	cloudwiki::access	-
GetEspaceGroupList	cloudwiki::access	-
GetEspaceGroupUserList	cloudwiki::access	-
GetPrivilegeList	cloudwiki::access	-
GetModuleList	cloudwiki::access	-
QueryMigrateStatus	cloudwiki::access	-
GetGlobalFavourites	cloudwiki::access	-
GetGlobalFavouriteCreators	cloudwiki::access	-
GetDiscoveryPage	cloudwiki::access	-
GetConfigByKey	cloudwiki::access	-
GetConfigsByType	cloudwiki::access	-
GuideRedirect	cloudwiki::access	-
GetProjectDrive	cloudwiki::access	-
GetDrivePage	cloudwiki::access	-
GetZhiShiKuAmountInfo	cloudwiki::access	codeartsworkspace:project:getCreatorAccountActivationStatus
GetUserAmountInfo	cloudwiki::access	codeartsworkspace:project:getCreatorAccountActivationStatus
GetUpdateAmount	cloudwiki::access	-
GetProjectAmount	cloudwiki::access	-
GetNewAmountInfo	cloudwiki::access	-
CleanHistory	cloudwiki::access	-
RollBack	cloudwiki::access	-
SyncZhishiku	cloudwiki::access	-
ShareZhiShiKu	cloudwiki::access	-
PublicTreeFromWiki	cloudwiki::access	-
UpdateZhishikuInvitePermission	cloudwiki::access	-
PublicPrivateTree	cloudwiki::access	-
ShareZhiShiKu4Driver	cloudwiki::access	-
PublicTreeFromDriver	cloudwiki::access	-
UpdateZhishikuInvitePermission4Driver	cloudwiki::access	-
PublicPrivateTree4Driver	cloudwiki::access	-
AddTenantZhishikuInvite	cloudwiki::access	-
GetZhishikuInviteListByObjId	cloudwiki::access	-
AddZhishikuInvite4Driver	cloudwiki::access	codeartsworkspace:project:getCreatorAccountActivationStatus
AddZhishikuInvite	cloudwiki::access	-
AddTenantZhishikuInvite4Driver	cloudwiki::access	-
GetZhishikuInviteListByObjId4Driver	cloudwiki::access	-
AddZhishikuInvite4Wiki	cloudwiki::access	-
GetZhishikuInviteListByTenant	cloudwiki::access	-
GetShareTree	cloudwiki::access	-
PreviewSharedFileObsUrl	cloudwiki::access	-
GetZhishikuInviteListByTenant4Driver	cloudwiki::access	-
GetShareTree4Driver	cloudwiki::access	-
DeleteZhishikuInvite	cloudwiki::access	-
DeleteZhishikuInvite4Driver	cloudwiki::access	-
UpdateTeamZhiShiKu	cloudwiki::access	codeartsworkspace:project:getCreatorAccountActivationStatus
UpdateTeamZskExtendAttribute	cloudwiki::access	codeartsworkspace:project:getCreatorAccountActivationStatus
UpdatePrivateZhiShiKu	cloudwiki::access	codeartsworkspace:project:getCreatorAccountActivationStatus
UpdatePriviteZskExtendAttribute	cloudwiki::access	codeartsworkspace:project:getCreatorAccountActivationStatus
UpdateTeamDrive	cloudwiki::access	codeartsworkspace:project:getCreatorAccountActivationStatus
UpdatePrivateDrive	cloudwiki::access	codeartsworkspace:project:getCreatorAccountActivationStatus
UpdateProjectSpaceSettings	cloudwiki::access	-
SaveTalkNotes	cloudwiki::access	-
GetTalkNotesPage	cloudwiki::access	-
GetTalkNotesTimes	cloudwiki::access	-
SyncWikiTalknotes	cloudwiki::access	-
DeleteTalkNotes	cloudwiki::access	-
SaveTemplate	cloudwiki::access	-
SaveDocToTemplate	cloudwiki::access	codeartsworkspace:project:getCreatorAccountActivationStatus
DeleteTemplate	cloudwiki::access	codeartsworkspace:project:getCreatorAccountActivationStatus
GetTemplatePage	cloudwiki::access	-
GetTemplateById	cloudwiki::access	-
GetTemplateThumbnail	cloudwiki::access	-
GetTemplateList	cloudwiki::access	-
QueryTemplateCategory	cloudwiki::access	-
SyncTemplate	cloudwiki::access	-
RenameTemplate	cloudwiki::access	codeartsworkspace:project:getCreatorAccountActivationStatus
ExchangeTemplate	cloudwiki::access	-
ChangeTemplateCategory	cloudwiki::access	-
UpdateTemplateCategory	cloudwiki::access	-
UploadPreViewImg	cloudwiki::access	-
SaveTemplateCategory	cloudwiki::access	-
DeleteTemplateCategory	cloudwiki::access	-

Resources

CodeArts Wiki does not support resource-level authorization. To allow access to CodeArts Wiki, use a wildcard (*) in the Resource element of SCPs, indicating that SCPs will be applied to all resources.