Help Center/ CodeArts Repo/ API Reference/ Actions Supported by Identity Policy-based Authorization

Updated on 2026-01-27 GMT+08:00

View PDF

Actions Supported by Identity Policy-based Authorization

IAM provides system-defined identity policies to define typical cloud service permissions. You can also create custom identity policies using the actions supported by cloud services for more refined access control.

In addition to IAM, the Organizations service also provides Service Control Policies (SCPs) to set access control policies.

SCPs do not actually grant any permissions to an entity. They only set the permissions boundary for the entity. When SCPs are attached to an organizational unit (OU) or a member account, the SCPs do not directly grant permissions to that OU or member account. Instead, the SCPs only determine what permissions are available for that member account or those member accounts under that OU. The granted permissions can be applied only if they are allowed by the SCPs.

To learn more about how IAM is different from Organizations for access control, see How IAM Is Different from Organizations for Access Control?.

This section describes the elements used by IAM custom identity policies and Organizations SCPs. The elements include actions, resources, and conditions.

For details about how to use these elements to edit an IAM custom identity policy, see Creating a Custom Identity Policy.
For details about how to use these elements to edit a custom SCP, see Creating an SCP.

Actions

Actions are specific operations that are allowed or denied in an identity policy.

The Access Level column describes how the action is classified (List, Read, or Write). This classification helps you understand the level of access that an action grants when you use it in an identity policy.
The Resource Type column indicates whether the action supports resource-level permissions.
- You can use a wildcard (*) to indicate all resource types. If this column is empty (-), the action does not support resource-level permissions and you must specify all resources ("*") in your identity policy statements.
- If this column includes a resource type, you must specify the URN in the Resource element of your identity policy statements.
- Required resources are marked with asterisks (*) in the table. If you specify a resource in a statement using this action, then it must be of this type.
For details about the resource types defined by CodeArtsRepo, see Resources.
The Condition Key column contains keys that you can specify in the Condition element of an identity policy statement.
- If the Resource Type column has values for an action, the condition key takes effect only for the listed resource types.
- If the Resource Type column is empty (-) for an action, the condition key takes effect for all resources that action supports.
- If the Condition Key column is empty (-) for an action, the action does not support any condition keys.
For details about the condition keys defined by CodeArtsRepo, see Table 3.
The Alias column lists the policy actions that are configured in identity policies. With these actions, you can use APIs for policy-based authorization. For details, see Policies and Identity Policies.

The following table lists the actions that you can define in identity policy statements for CodeArtsRepo.

**Table 1** Actions supported by CodeArtsRepo
Action	Description	Access Level	Resource Type (*: required)	Condition Key	Alias
codeartsrepo:repository:getRepository	Grant permission to get repository.	Read	-	-	-
codeartsrepo:repository:createRepository	Grant permission to create repository.	Write	-	-	-
codeartsrepo:repository:forkRepository	Grant permission to fork repository.	Write	-	-	-
codeartsrepo:repository:transferRepository	Grant permission to transfer repository.	Write	-	-	-
codeartsrepo:repository:deleteRepository	Grant permission to delete repository.	Write	-	-	-
codeartsrepo:repository:setRepository	Grant permission to set repository.	Write	-	-	-
codeartsrepo:repository:pushCode	Grant permission to upload code.	Write	-	-	-
codeartsrepo:repository:downloadCode	Grant permission to download code.	Read	-	-	-
codeartsrepo:repository:getMembers	Grant permission to get members.	Read	-	-	-
codeartsrepo:repository:createMembers	Grant permission to create members.	Write	-	-	-
codeartsrepo:repository:deleteMembers	Grant permission to delete members.	Write	-	-	-
codeartsrepo:repository:updateMembers	Grant permission to update members.	Write	-	-	-
codeartsrepo:repository:createBranch	Grant permission to create brance.	Write	-	-	-
codeartsrepo:repository:deleteBranch	Grant permission to delete brance.	Write	-	-	-
codeartsrepo:repository:createTag	Grant permission to create tag.	Write	-	-	-
codeartsrepo:repository:deleteTag	Grant permission to delete tag.	Write	-	-	-
codeartsrepo:repository:getMergeRequest	Grant permission to get MR.	Read	-	-	-
codeartsrepo:repository:createMergeRequest	Grant permission to create MR.	Write	-	-	-
codeartsrepo:repository:updateMergeRequest	Grant permission to update MR.	Write	-	-	-
codeartsrepo:repository:commentMergeRequest	Grant permission to comment MR.	Write	-	-	-
codeartsrepo:repository:reviewMergeRequest	Grant permission to review MR.	Write	-	-	-
codeartsrepo:repository:approveMergeRequest	Grant permission to approve MR.	Write	-	-	-
codeartsrepo:repository:mergeMergeRequest	Grant permission to merge MR.	Write	-	-	-
codeartsrepo:repository:setRepositoryDeployKey	Grant permission to set repository deploy key.	Write	-	-	-
codeartsrepo:group:setGroupDeployKey	Grant permission to set group deploy key.	Write	-	-	-
codeartsrepo::createProjectDeployKey	Grant permission to create project deploy key.	Write	-	-	-
codeartsrepo::createUserAccessToken	Grant permission to create user access token.	Write	-	-	-
codeartsrepo::createUserSSHkey	Grant permission to create user SSH key.	Write	-	-	-
codeartsrepo:group:getGroup	Grant permission to get group.	Read	-	-	-
codeartsrepo:group:createGroup	Grant permission to create group.	Write	-	-	-
codeartsrepo:group:deleteGroup	Grant permission to delete group.	Write	-	-	-
codeartsrepo:group:setGroup	Grant permission to set group.	Write	-	-	-
codeartsrepo:group:getMembers	Grant permission to get members.	Read	-	-	-
codeartsrepo:group:createMembers	Grant permission to create members.	Write	-	-	-
codeartsrepo:group:deleteMembers	Grant permission to delete members.	Write	-	-	-
codeartsrepo:group:updateMembers	Grant permission to update members.	Write	-	-	-
codeartsrepo::getTenantSetting	Grant permission to get tenant setting.	Read	-	-	-
codeartsrepo::createTenantSetting	Grant permission to create tenant setting.	Write	-	-	-
codeartsrepo::updateTenantSetting	Grant permission to update tenant setting.	Write	-	-	-
codeartsrepo::deleteTenantSetting	Grant permission to delete tenant setting.	Write	-	-	-
codeartsrepo::getUserSetting	Grant permission to get user setting.	Read	-	-	-
codeartsrepo::createUserSetting	Grant permission to create user setting.	Write	-	-	-
codeartsrepo::updateUserSetting	Grant permission to update user setting.	Write	-	-	-
codeartsrepo::deleteUserSetting	Grant permission to delete user setting.	Write	-	-	-
codeartsrepo::getProjectSetting	Grant permission to get project setting.	Read	-	codeartsrepo:ProjectId	-
codeartsrepo::createProjectSetting	Grant permission to create project setting.	Write	-	codeartsrepo:ProjectId	-
codeartsrepo::updateProjectSetting	Grant permission to update project setting.	Write	-	codeartsrepo:ProjectId	-
codeartsrepo::deleteProjectSetting	Grant permission to delete project setting.	Write	-	codeartsrepo:ProjectId	-

Each API of CodeArtsRepo usually supports one or more actions. Table 2 lists the supported actions and dependencies.

**Table 2** Actions and dependencies supported by CodeArtsRepo APIs
API	Action	Dependencies
GET /v4/tenant/repositories	codeartsrepo:repository:getRepository	-
POST /v4/repositories/{repository_id}/branches/batch-delete	codeartsrepo:repository:deleteBranch	-
GET /v4/repositories/{repository_id}/repository/commit-list	codeartsrepo:repository:getRepository	-
GET /v4/repositories/{repository_id}/repository/logs-tree	codeartsrepo:repository:getRepository	-
GET /v4/repositories/{repository_id}/repository/refs	codeartsrepo:repository:getRepository	-
POST /v4/repositories/{repository_id}/repository/statistics	codeartsrepo:repository:getRepository	-
POST /v4/{project_id}/groups	codeartsrepo:group:createGroup	-
PUT /v4/groups/{group_id}/transfer	codeartsrepo:group:createGroup	-
GET /v4/{project_id}/manageable-groups	codeartsrepo:group:getGroup	-
GET /v4/{project_id}/groups/{group_id}	codeartsrepo:group:getGroup	-
DELETE /v4/{project_id}/groups/{group_id}	codeartsrepo:group:deleteGroup	-
POST /v4/{project_id}/groups/{group_id}/user-group/{user_group_id}	codeartsrepo:group:updateMembers	-
POST /v4/{project_id}/repositories/{repository_id}/user-group/{user_group_id}	codeartsrepo:repository:createMembers	-
POST /v4/{project_id}/repositories/{repository_id}/lock	codeartsrepo:repository:setRepository	-
POST /v4/{project_id}/repositories/{repository_id}/unlock	codeartsrepo:repository:setRepository	-
GET /v4/projects/{id}/trusted-ip-addresses	codeartsrepo:repository:getRepository	-
POST /v4/projects/{id}/trusted-ip-addresses	codeartsrepo:repository:setRepository	-
PUT /v4/projects/{id}/trusted-ip-addresses/{ip_id}	codeartsrepo:repository:setRepository	-
DELETE /v4/projects/{id}/trusted-ip-addresses/{ip_id}	codeartsrepo:repository:setRepository	-
GET /v4/repositories/{repository_id}/repository/archive	codeartsrepo:repository:downloadCode	-
GET /v4/repositories/{repository_id}/repository/submodules	codeartsrepo:repository:getRepository	-
POST /v4/repositories/{repository_id}/repository/submodules	codeartsrepo:repository:pushCode	-
GET /v4/repositories/{repository_id}/repository/blobs	codeartsrepo:repository:getRepository	-
GET /v4/repositories/{repository_id}/repository/commit-statistics	codeartsrepo:repository:getRepository	-
GET /v4/repositories/{repository_id}/repository/statistics-status	codeartsrepo:repository:getRepository	-
GET /v4/repositories/{repository_id}/repository/languages	codeartsrepo:repository:getRepository	-
GET /v4/repositories/{repository_id}/events	codeartsrepo:repository:getRepository	-
GET /v4/repositories/{repository_id}/user-groups	codeartsrepo:repository:getMembers	-
GET /v4/repositories/{repository_id}/members	codeartsrepo:repository:getMembers	-
POST /v4/repositories/{repository_id}/members	codeartsrepo:repository:createMembers	-
GET /v4/repositories/{repository_id}/repository/branches	codeartsrepo:repository:getRepository	-
POST /v4/repositories/{repository_id}/repository/branches	codeartsrepo:repository:createBranch	-
GET /v4/repositories/{repository_id}/repository/tags	codeartsrepo:repository:getRepository	-
POST /v4/repositories/{repository_id}/repository/tags	codeartsrepo:repository:createTag	-
GET /v4/repositories/{repository_id}/repository/tag	codeartsrepo:repository:getRepository	-
DELETE /v4/repositories/{repository_id}/repository/tag	codeartsrepo:repository:deleteTag	-
GET /v4/repositories/{repository_id}/repository/trees	codeartsrepo:repository:getRepository	-
POST /v4/repositories/{repository_id}/repository/files	codeartsrepo:repository:pushCode	-
GET /v4/repositories/{repository_id}/repository/readme-file	codeartsrepo:repository:getRepository	-
GET /v4/repositories/{repository_id}/repository/file	codeartsrepo:repository:getRepository	-
PUT /v4/repositories/{repository_id}/repository/file	codeartsrepo:repository:pushCode	-
DELETE /v4/repositories/{repository_id}/repository/file	codeartsrepo:repository:pushCode	-
GET /v4/repositories/{repository_id}/repository/branch	codeartsrepo:repository:getRepository	-
PUT /v4/repositories/{repository_id}/repository/branch	codeartsrepo:repository:createBranch	-
DELETE /v4/repositories/{repository_id}/repository/branch	codeartsrepo:repository:deleteBranch	-
GET /v4/repositories/{repository_id}/compare	codeartsrepo:repository:getRepository	-
GET /v4/repositories/{repository_id}/diff-lines	codeartsrepo:repository:getRepository	-
GET /v4/repositories/{repository_id}/notification-subscriptions/subscription	codeartsrepo:repository:getRepository	-
PUT /v4/repositories/{repository_id}/notification-subscriptions/subscription	codeartsrepo:repository:setRepository	-
GET /v4/repositories/{repository_id}/notification-subscriptions/status	codeartsrepo:repository:getRepository	-
GET /v4/repositories/{repository_id}/permission-inherit-setting	codeartsrepo:repository:getRepository	-
PUT /v4/repositories/{repository_id}/permission-inherit-setting	codeartsrepo:repository:setRepository	-
GET /v4/tenant/trusted-ip-addresses	codeartsrepo::getTenantSetting	-
POST /v4/tenant/trusted-ip-addresses	codeartsrepo::createTenantSetting	-
PUT /v4/tenant/trusted-ip-addresses/{ip_id}	codeartsrepo:repository:setRepository	-
DELETE /v4/tenant/trusted-ip-addresses/{ip_id}	codeartsrepo::deleteTenantSetting	-
GET /v4/repositories/{repository_id}/pipelines/{pipeline_id}/latest-jobs	codeartsrepo:repository:getRepository	-
GET /v4/repositories/{repository_id}/pipelines/{pipeline_id}/jobs	codeartsrepo:repository:getRepository	-
GET /v4/projects/{project_id}/hooks	codeartsrepo::getProjectSetting	-
POST /v4/projects/{project_id}/hooks	codeartsrepo::createProjectSetting	-
GET /v4/projects/{project_id}/hooks/{hook_id}	codeartsrepo::getProjectSetting	-
PUT /v4/projects/{project_id}/hooks/{hook_id}	codeartsrepo::updateProjectSetting	-
DELETE /v4/projects/{project_id}/hooks/{hook_id}	codeartsrepo::deleteProjectSetting	-
GET /v4/repositories/{repository_id}/hooks	codeartsrepo:repository:getRepository	-
POST /v4/repositories/{repository_id}/hooks	codeartsrepo:repository:setRepository	-
GET /v4/repositories/{repository_id}/hooks/{hook_id}	codeartsrepo:repository:getRepository	-
PUT /v4/repositories/{repository_id}/hooks/{hook_id}	codeartsrepo:repository:setRepository	-
DELETE /v4/repositories/{repository_id}/hooks/{hook_id}	codeartsrepo:repository:setRepository	-
GET /v4/repositories/{repository_id}/merge-requests/{merge_request_iid}/actual-head-pipeline	codeartsrepo:repository:getRepository	-
POST /v4/repositories/{repository_id}/deploy-keys/check-key	codeartsrepo:repository:setRepositoryDeployKey	-
DELETE /v4/repositories/{repository_id}/deploy-keys/{key_id}	codeartsrepo:repository:setRepositoryDeployKey	-
GET /v4/repositories/{repository_id}/remote-mirror	codeartsrepo:repository:getRepository	-
PUT /v4/repositories/{repository_id}/remote-mirror	codeartsrepo:repository:setRepository	-
POST /v4/repositories/{repository_id}/remote-mirror	codeartsrepo:repository:setRepository	-
GET /v4/repositories/{repository_id}/merge-requests/{merge_request_iid}/votes	codeartsrepo:repository:getMergeRequest	-
PUT /v4/repositories/{repository_id}/merge-requests/{merge_request_iid}/vote	codeartsrepo:repository:reviewMergeRequest	-
DELETE /v4/repositories/{repository_id}/merge-requests/{merge_request_iid}/vote	codeartsrepo:repository:reviewMergeRequest	-
GET /v4/repositories/{repository_id}/merge-requests/{merge_request_iid}/discussions/{discussion_id}	codeartsrepo:repository:getMergeRequest	-
PUT /v4/repositories/{repository_id}/merge-requests/{merge_request_iid}/discussions/{discussion_id}	codeartsrepo:repository:commentMergeRequest	-
GET /v4/repositories/{repository_id}/reviews	codeartsrepo:repository:getRepository	-
GET /v4/repositories/{repository_id}/merge-requests/{merge_request_iid}/discussions	codeartsrepo:repository:getMergeRequest	-
POST /v4/repositories/{repository_id}/merge-requests/{merge_request_iid}/discussions	codeartsrepo:repository:commentMergeRequest	-
GET /v4/repositories/{repository_id}/merge-requests/{merge_request_iid}/system-notes	codeartsrepo:repository:getMergeRequest	-
GET /v4/repositories/{repository_id}/commits/{sha}/discussions	codeartsrepo:repository:getRepository	-
POST /v4/repositories/{repository_id}/merge-requests/{merge_request_iid}/discussions/{discussion_id}/notes	codeartsrepo:repository:commentMergeRequest	-
PUT /v4/repositories/{repository_id}/merge-requests/{merge_request_iid}/discussions/{discussion_id}/notes/{note_id}	codeartsrepo:repository:commentMergeRequest	-
DELETE /v4/repositories/{repository_id}/merge-requests/{merge_request_iid}/discussions/{discussion_id}/notes/{note_id}	codeartsrepo:repository:commentMergeRequest	-
GET /v4/repositories/{repository_id}/review-authors	codeartsrepo:repository:getRepository	-
GET /v4/repositories/{repository_id}/merge-requests/{merge_request_iid}	codeartsrepo:repository:getMergeRequest	-
PUT /v4/repositories/{repository_id}/merge-requests/{merge_request_iid}	codeartsrepo:repository:updateMergeRequest	-
GET /v4/repositories/{repository_id}/merge-requests/{merge_request_iid}/mergeable-state-out	codeartsrepo:repository:getMergeRequest	-
PUT /v4/repositories/{repository_id}/merge-requests/{merge_request_iid}/merge	codeartsrepo:repository:mergeMergeRequest	-
GET /v4/repositories/{repository_id}/merge-requests	codeartsrepo:repository:getMergeRequest	-
POST /v4/repositories/{repository_id}/merge-requests	codeartsrepo:repository:createMergeRequest	-
GET /v4/repositories/{repository_id}/merge-requests/statistic	codeartsrepo:repository:getMergeRequest	-
GET /v4/repositories/{repository_id}/approver-settings	codeartsrepo:repository:getRepository	-
POST /v4/repositories/{repository_id}/approver-settings	codeartsrepo:repository:setRepository	-
PUT /v4/repositories/{repository_id}/approver-settings/{setting_id}	codeartsrepo:repository:setRepository	-
DELETE /v4/repositories/{repository_id}/approver-settings/{setting_id}	codeartsrepo:repository:setRepository	-
GET /v4/repositories/{repository_id}/merge-requests/{merge_request_iid}/commits	codeartsrepo:repository:getMergeRequest	-
GET /v4/repositories/{repository_id}/merge-requests/{merge_request_iid}/changes-trees	codeartsrepo:repository:getMergeRequest	-
GET /v4/repositories/{repository_id}/merge-requests/{merge_request_iid}/changes	codeartsrepo:repository:getMergeRequest	-
GET /v4/repositories/{repository_id}/commits/{sha}/merge-requests	codeartsrepo:repository:getMergeRequest	-
GET /v4/merge-requests	codeartsrepo:repository:getMergeRequest	-
GET /v4/repositories/{repository_id}/merge-requests/{merge_request_iid}/participants	codeartsrepo:repository:getMergeRequest	-
POST /v4/repositories/{repository_id}/repository/commits/{sha}/revert	codeartsrepo:repository:pushCode	-
GET /v4/repositories/{repository_id}/repository/commits/diff-metadata	codeartsrepo:repository:getRepository	-
GET /v4/repositories/{repository_id}/repository/commits/{sha}/refs	codeartsrepo:repository:getRepository	-
GET /v4/repositories/{repository_id}/repository/commits/file-diff	codeartsrepo:repository:getRepository	-
GET /v4/repositories/{repository_id}/repository/commits	codeartsrepo:repository:getRepository	-
POST /v4/repositories/{repository_id}/repository/commits	codeartsrepo:repository:pushCode	-
GET /v4/repositories/{repository_id}/repository/commits/diff	codeartsrepo:repository:getRepository	-
POST /v4/repositories/{repository_id}/import-merge-requests	codeartsrepo:repository:createMergeRequest	-
GET /v4/repositories/{repository_id}/merge-requests/conflict	codeartsrepo:repository:getMergeRequest	-
GET /v4/repositories/{repository_id}/merge-requests/setting	codeartsrepo:repository:getRepository	-
PUT /v4/repositories/{repository_id}/merge-requests/setting	codeartsrepo:repository:setRepository	-
GET /v4/groups/{group_id}/merge-requests/setting	codeartsrepo:group:getGroup	-
GET /v4/projects/{project_id}/merge-requests/setting	codeartsrepo::getProjectSetting	-
GET /v4/repositories/{repository_id}/merge-requests/templates	codeartsrepo:repository:getRepository	-
POST /v4/repositories/{repository_id}/merge-requests/templates	codeartsrepo:repository:setRepository	-
GET /v4/repositories/{repository_id}/discussion/templates	codeartsrepo:repository:getRepository	-
GET /v4/repositories/{repository_id}/merge-requests/template/{template_id}	codeartsrepo:repository:getRepository	-
PUT /v4/repositories/{repository_id}/merge-requests/template/{template_id}	codeartsrepo:repository:setRepository	-
DELETE /v4/repositories/{repository_id}/merge-requests/template/{template_id}	codeartsrepo:repository:setRepository	-
POST /v4/repositories/{repository_id}/review-settings	codeartsrepo:repository:setRepository	-
GET /v4/repositories/{repository_id}/review-setting	codeartsrepo:repository:getRepository	-
GET /v4/default-review-categories	codeartsrepo:repository:getRepository	-
GET /v4/groups/{group_id}/approver-settings	codeartsrepo:group:getGroup	-
POST /v4/groups/{group_id}/approver-settings	codeartsrepo:group:setGroup	-
GET /v4/projects/{project_id}/approver-settings	codeartsrepo::getProjectSetting	-
POST /v4/projects/{project_id}/approver-settings	codeartsrepo::updateProjectSetting	-
PUT /v4/groups/{group_id}/approver-settings/{setting_id}	codeartsrepo:group:setGroup	-
DELETE /v4/groups/{group_id}/approver-settings/{setting_id}	codeartsrepo:group:setGroup	-
PUT /v4/projects/{project_id}/approver-settings/{setting_id}	codeartsrepo::updateProjectSetting	-
DELETE /v4/projects/{project_id}/approver-settings/{setting_id}	codeartsrepo::updateProjectSetting	-
GET /v4/groups/{group_id}/merge-requests/assignee-candidates	codeartsrepo:group:getGroup	-
GET /v4/projects/{project_id}/merge-requests/assignee-candidates	codeartsrepo::getProjectSetting	-
GET /v4/groups/{group_id}/merge-requests/reviewers	codeartsrepo:group:getGroup	-
GET /v4/projects/{project_id}/merge-requests/reviewers	codeartsrepo::getProjectSetting	-
GET /v4/repositories/{repository_id}/merge-requests/approval-approvers	codeartsrepo:repository:getMergeRequest	-
GET /v4/repositories/{repository_id}/merge-requests/approval-reviewers	codeartsrepo:repository:getMergeRequest	-
PUT /v4/repositories/{repository_id}/merge-requests/{merge_request_iid}/approval-approvers	codeartsrepo:repository:updateMergeRequest	-
PUT /v4/repositories/{repository_id}/merge-requests/{merge_request_iid}/approval-reviewers	codeartsrepo:repository:updateMergeRequest	-
PUT /v4/repositories/{repository_id}/merge-requests/{merge_request_iid}/approval	codeartsrepo:repository:approveMergeRequest	-
PUT /v4/repositories/{repository_id}/merge-requests/{merge_request_iid}/approval-review	codeartsrepo:repository:reviewMergeRequest	-
GET /v4/groups/{group_id}/review-settings	codeartsrepo:group:getGroup	-
POST /v4/groups/{group_id}/review-settings	codeartsrepo:group:setGroup	-
GET /v4/projects/{project_id}/review-settings	codeartsrepo::getProjectSetting	-
POST /v4/projects/{project_id}/review-settings	codeartsrepo::updateProjectSetting	-
GET /v4/groups/{group_id}/setting/note-required-attributes	codeartsrepo:group:getGroup	-
POST /v4/groups/{group_id}/setting/note-required-attributes	codeartsrepo:group:setGroup	-
GET /v4/projects/{project_id}/setting/note-required-attributes	codeartsrepo::getProjectSetting	-
POST /v4/projects/{project_id}/setting/note-required-attributes	codeartsrepo::updateProjectSetting	-
GET /v4/repositories/{repository_id}/setting/note-required-attributes	codeartsrepo:repository:getRepository	-
POST /v4/repositories/{repository_id}/setting/note-required-attributes	codeartsrepo:repository:setRepository	-
GET /v4/repositories/{repository_id}/merge-requests/assignee-candidates	codeartsrepo:repository:getMergeRequest	-
PUT /v4/repositories/{repository_id}/merge-requests/{merge_request_iid}/rebase	codeartsrepo:repository:pushCode	-
PUT /v4/repositories/{repository_id}/merge-requests/{merge_request_iid}/resolve-conflicts	codeartsrepo:repository:updateMergeRequest	-
GET /v4/repositories/{repository_id}/merge-requests/{merge_request_iid}/conflict-files	codeartsrepo:repository:getMergeRequest	-
GET /v4/repositories/{repository_id}/merge-requests/{merge_request_iid}/average-evaluation	codeartsrepo:repository:getMergeRequest	-
GET /v4/repositories/{repository_id}/merge-requests/{merge_request_iid}/evaluations	codeartsrepo:repository:getMergeRequest	-
GET /v4/repositories/{repository_id}/merge-requests/{merge_request_iid}/comments-by-line	codeartsrepo:repository:getRepository	-
GET /v4/repositories/{repository_id}/commits/{sha}/comments-by-line	codeartsrepo:repository:getRepository	-
GET /v4/groups/{group_id}/merge-requests/templates	codeartsrepo:group:getGroup	-
POST /v4/groups/{group_id}/merge-requests/templates	codeartsrepo:group:setGroup	-
PUT /v4/groups/{group_id}/merge-requests/template/{template_id}	codeartsrepo:group:setGroup	-
DELETE /v4/groups/{group_id}/merge-requests/template/{template_id}	codeartsrepo:group:setGroup	-
GET /v4/projects/{project_id}/merge-requests/templates	codeartsrepo::getProjectSetting	-
POST /v4/projects/{project_id}/merge-requests/templates	codeartsrepo::updateProjectSetting	-
PUT /v4/projects/{project_id}/merge-requests/template/{template_id}	codeartsrepo::updateProjectSetting	-
DELETE /v4/projects/{project_id}/merge-requests/template/{template_id}	codeartsrepo::updateProjectSetting	-
GET /v4/repositories/{repository_id}/merge-requests/{merge_request_iid}/versions	codeartsrepo:repository:getMergeRequest	-
POST /v4/repositories/{repository_id}/merge-requests/{merge_request_iid}/cherry-pick	codeartsrepo:repository:createMergeRequest	-
GET /v4/projects/{project_id}/merge-requests	codeartsrepo:repository:getMergeRequest	-
GET /v4/user/recent-push-events	codeartsrepo:repository:getRepository	-
GET /v4/repositories/{repository_id}/repository/blobs/{blob_id}/raw	codeartsrepo:repository:downloadCode	-
GET /v4/repositories/{repository_id}/repository/file-list	codeartsrepo:repository:getRepository	-
GET /v4/repositories/{repository_id}/repository/file-content	codeartsrepo:repository:getRepository	-
GET /v4/repositories/{repository_id}/repository/blame	codeartsrepo:repository:getRepository	-
GET /v4/repositories/{repository_id}/repository/upper-files-tree	codeartsrepo:repository:getRepository	-
PUT /v4/repositories/{repository_id}/repository/rename-file	codeartsrepo:repository:pushCode	-
GET /v4/repositories/{repository_id}/repository/files/raw	codeartsrepo:repository:getRepository	-
GET /v4/repositories/{repository_id}/file-push-permissions	codeartsrepo:repository:getRepository	-
PUT /v4/repositories/{repository_id}/file-push-permissions	codeartsrepo:repository:setRepository	-
POST /v4/repositories/{repository_id}/file-push-permissions	codeartsrepo:repository:setRepository	-
POST /v4/repositories/{repository_id}/file-push-permissions/batch-delete	codeartsrepo:repository:setRepository	-
GET /v4/groups/{group_id}/permissions-resources/{resource_id}	codeartsrepo:group:getGroup	-
GET /v4/groups/{group_id}/settings-inherit-cfg	codeartsrepo::getProjectSetting	-
GET /v4/projects/{project_id}/settings-inherit-cfg	codeartsrepo::getProjectSetting	-
PUT /v4/projects/{project_id}/settings-inherit-cfg	codeartsrepo::updateProjectSetting	-
POST /v4/user/groups/group-permissions	codeartsrepo:group:getGroup	-
GET /v4/projects/{project_id}/protected-branches	codeartsrepo::getProjectSetting	-
POST /v4/projects/{project_id}/protected-branches	codeartsrepo::createProjectSetting	-
GET /v4/groups/{group_id}/permission-inherit-enabled	codeartsrepo:group:getGroup	-
GET /v4/projects/{project_id}/member-setting	codeartsrepo::getProjectSetting	-
GET /v4/projects/{project_id}/policies/general	codeartsrepo:repository:getRepository	-
GET /v4/groups/{group_id}/policies/general	codeartsrepo:group:getGroup	-
GET /v4/groups/permissions/resources	codeartsrepo:group:getGroup	-
GET /v4/user/gpg-keys	codeartsrepo::getUserSetting	-
GET /v4/user/keys	codeartsrepo::getUserSetting	-
POST /v4/user/keys	codeartsrepo::createUserSSHkey	-
POST /v4/user/email-verify-code	codeartsrepo::updateUserSetting	-
GET /v4/user/emails	codeartsrepo::getUserSetting	-
PUT /v4/user/emails	codeartsrepo::updateUserSetting	-
GET /v4/groups/{group_id}/watermark	codeartsrepo:group:getGroup	-
PUT /v4/groups/{group_id}/watermark	codeartsrepo:group:setGroup	-
GET /v4/groups/{group_id}/inherit-setting	codeartsrepo:group:getGroup	-
GET /v4/groups/{group_id}/general-policy	codeartsrepo:group:getGroup	-
PUT /v4/groups/{group_id}/general-policy	codeartsrepo:group:setGroup	-
GET /v4/groups/{group_id}/user-groups	codeartsrepo:group:getMembers	-
GET /v4/projects/{project_id}/protected-tags	codeartsrepo::getProjectSetting	-
POST /v4/projects/{project_id}/protected-tags	codeartsrepo::createProjectSetting	-
GET /v4/projects/{project_id}/general-policy	codeartsrepo:group:getGroup	-
PUT /v4/projects/{project_id}/general-policy	codeartsrepo:group:setGroup	-
GET /v4/groups/list	codeartsrepo:group:getGroup	-
GET /v4/groups/{group_id}/members/list	codeartsrepo:group:getMembers	-
GET /v4/groups/{group_id}/members/addable-list	codeartsrepo:group:getGroup	-
GET /v4/user/https-password-setting	codeartsrepo::getUserSetting	-
PUT /v4/user/https-password-setting	codeartsrepo::updateUserSetting	-
GET /v4/projects/{project_id}/members	codeartsrepo:group:getMembers	-
GET /v4/projects/{project_id}/subgroups-and-repositories	codeartsrepo:repository:getRepository	-
DELETE /v4/user/keys/{key_id}	codeartsrepo::updateUserSetting	-
GET /v4/groups/{group_id}/user-groups/addable-list	codeartsrepo:group:getMembers	-
GET /v4/users/impersonation-tokens	codeartsrepo::getUserSetting	-
GET /v4/groups/{group_id}/subgroups-and-repositories	codeartsrepo:repository:getRepository	-
GET /v4/groups/{group_id}/inherit	codeartsrepo:group:getGroup	-
POST /v4/repositories/{repository_id}/system-labels	codeartsrepo:repository:setRepository	-
GET /v4/repositories/{repository_id}/labels	codeartsrepo:repository:getRepository	-
POST /v4/repositories/{repository_id}/labels	codeartsrepo:repository:setRepository	-
PUT /v4/repositories/{repository_id}/label	codeartsrepo:repository:getRepository	-
DELETE /v4/repositories/{repository_id}/label	codeartsrepo:repository:getRepository	-
GET /v4/repositories/{repository_id}/protected-refs/user-groups	codeartsrepo:repository:getRepository	-
GET /v4/groups/{group_id}/protected-refs/user-groups	codeartsrepo:group:getGroup	-
GET /v4/projects/{project_id}/protected-refs/user-groups	codeartsrepo::getProjectSetting	-
GET /v4/repository/{repository_id}/permissions/{resource_name}	codeartsrepo:repository:getRepository	-
PUT /v4/repository/{repository_id}/permissions/{resource_name}	codeartsrepo:repository:setRepository	-
PUT /v4/groups/{group_id}/permissions/{resource_id}	codeartsrepo:group:getGroup	-
GET /v4/projects/{project_id}/items/{item_id}/commits	codeartsrepo:repository:getRepository	-
GET /v4/repositories/{repository_id}/protected-branches	codeartsrepo:repository:getRepository	-
PUT /v4/repositories/{repository_id}/protected-branches	codeartsrepo:repository:setRepository	-
POST /v4/repositories/{repository_id}/protected-branches	codeartsrepo:repository:setRepository	-
POST /v4/repositories/{repository_id}/protected-branches/bulk-deletion	codeartsrepo:repository:setRepository	-
GET /v4/repositories/{repository_id}/protected-branch	codeartsrepo:repository:getRepository	-
PUT /v4/repositories/{repository_id}/protected-branch	codeartsrepo:repository:setRepository	-
DELETE /v4/repositories/{repository_id}/protected-branch	codeartsrepo:repository:setRepository	-
GET /v4/repositories/{repository_id}/protected-tags	codeartsrepo:repository:getRepository	-
PUT /v4/repositories/{repository_id}/protected-tags	codeartsrepo:repository:setRepository	-
POST /v4/repositories/{repository_id}/protected-tags	codeartsrepo:repository:setRepository	-
POST /v4/repositories/{repository_id}/protected-tags/bulk-deletion	codeartsrepo:repository:setRepository	-
GET /v4/repositories/{repository_id}/protected-tag	codeartsrepo:repository:getRepository	-
PUT /v4/repositories/{repository_id}/protected-tag	codeartsrepo:repository:setRepository	-
DELETE /v4/repositories/{repository_id}/protected-tag	codeartsrepo:repository:setRepository	-
GET /v4/repositories/{repository_id}/repository/stats/summary	codeartsrepo:repository:getRepository	-
GET /v4/repositories/{repository_id}/repository/stats/last-statistics	codeartsrepo:repository:getRepository	-
GET /v4/repository-templates	codeartsrepo:repository:getRepository	-
GET /v4/repositories/{repository_id}/inherit-setting-source	codeartsrepo:repository:getRepository	-
POST /v4/repositories/{repository_id}/repository/dir	codeartsrepo:repository:pushCode	-
GET /v4/repositories/{repository_id}/contributors	codeartsrepo:repository:getRepository	-
GET /v4/repositories/{repository_id}/inherit-setting	codeartsrepo:repository:getRepository	-
PUT /v4/repositories/{repository_id}/inherit-setting	codeartsrepo:repository:setRepository	-
POST /v4/repositories/{repository_id}/remote-mirror/associate	codeartsrepo:repository:setRepository	-
GET /v4/repositories/{repository_id}/general-policy	codeartsrepo:repository:getRepository	-
PUT /v4/repositories/{repository_id}/general-policy	codeartsrepo:repository:setRepository	-
GET /v4/repositories/{repository_id}/general-commit-rule	codeartsrepo:repository:getRepository	-
PUT /v4/repositories/{repository_id}/general-commit-rule	codeartsrepo:repository:setRepository	-
GET /v4/repositories/{repository_id}/commit-rules	codeartsrepo:repository:getRepository	-
POST /v4/repositories/{repository_id}/commit-rules	codeartsrepo:repository:setRepository	-
PUT /v4/repositories/{repository_id}/commit-rules/{commit_rule_id}	codeartsrepo:repository:setRepository	-
GET /v4/user/repository-import-records	codeartsrepo:repository:getRepository	-
GET /v4/repositories/{repository_id}/last-push-event	codeartsrepo:repository:getRepository	-
GET /v4/repositories/{repository_id}/statistics-summary	codeartsrepo:repository:getRepository	-
GET /v4/repositories/{repository_id}/user-ref-permission	codeartsrepo:repository:getRepository	-
POST /v4/repositories/{repository_id}/housekeeping	codeartsrepo:repository:setRepository	-
POST /v4/repositories/{repository_id}/deploy-keys/{key_id}/submodules	codeartsrepo:repository:setRepositoryDeployKey	-
DELETE /v4/repositories/{repository_id}/deploy-keys/{key_id}/submodules	codeartsrepo:repository:setRepositoryDeployKey	-
GET /v4/repositories/{repository_id}	codeartsrepo:repository:getRepository	-
GET /v4/user/repositories	codeartsrepo:repository:getRepository	-
GET /v4/repositories/{repository_id}/forks	codeartsrepo:repository:getRepository	-
POST /v4/repository-names/validations	codeartsrepo:repository:getRepository	-
GET /v4/projects/{project_id}/repositories	codeartsrepo:repository:getRepository	-
GET /v4/groups/{group_id}/repositories	codeartsrepo:repository:getRepository	-
POST /v4/tenant/repositories/export	codeartsrepo:repository:getRepository	-
POST /v4/groups/{group_id}/deploy-keys/check-key	codeartsrepo:group:getGroup	-
GET /v4/repositories/{repository_id}/deploy-keys	codeartsrepo:repository:getRepository	-
GET /v4/groups/{group_id}/deploy-keys	codeartsrepo:group:getGroup	-
GET /v4/projects/{project_id}/deploy-keys	codeartsrepo::getProjectSetting	-
GET /v4/repositories/{repository_id}/branch/work-items	codeartsrepo:repository:getRepository	-
GET /v4/repositories/{repository_id}/work-items	codeartsrepo:repository:getRepository	-
GET /v4/repositories/{repository_id}/e2e-setting	codeartsrepo:repository:getRepository	-
GET /v4/groups/{group_id}/e2e-setting	codeartsrepo:group:getGroup	-
GET /v4/projects/{project_id}/e2e-setting	codeartsrepo::getProjectSetting	-
GET /v4/projects/{project_id}/watermark	codeartsrepo::getProjectSetting	-
PUT /v4/projects/{project_id}/watermark	codeartsrepo::updateProjectSetting	-
GET /v4/repositories/{repository_id}/watermark	codeartsrepo:repository:getRepository	-
PUT /v4/repositories/{repository_id}/watermark	codeartsrepo:repository:setRepository	-
GET /v4/repositories/{repository_id}/hooks/{hook_id}/logs	codeartsrepo:repository:getRepository	-
GET /v4/repositories/{repository_id}/hooks/{hook_id}/logs/{log_id}	codeartsrepo:repository:getRepository	-
GET /v4/projects/{project_id}/hooks/{hook_id}/logs	codeartsrepo::getProjectSetting	-
GET /v4/projects/{project_id}/hooks/{hook_id}/logs/{log_id}	codeartsrepo::getProjectSetting	-
GET /v4/groups/{group_id}/hooks/{hook_id}/logs	codeartsrepo:group:getGroup	-
GET /v4/groups/{group_id}/hooks/{hook_id}/logs/{log_id}	codeartsrepo:group:getGroup	-
GET /v4/groups/{group_id}/hooks	codeartsrepo:group:getGroup	-
POST /v4/groups/{group_id}/hooks	codeartsrepo:group:setGroup	-
GET /v4/groups/{group_id}/hooks/{hook_id}	codeartsrepo:group:getGroup	-
PUT /v4/groups/{group_id}/hooks/{hook_id}	codeartsrepo:group:setGroup	-
DELETE /v4/groups/{group_id}/hooks/{hook_id}	codeartsrepo:group:setGroup	-

Resources

CodeArtsRepo does not support resource-level authorization. To allow access to CodeArtsRepo, use a wildcard (*) in the Resource element of the identity policy, indicating that the identity policy will be applied to all resources.

Conditions

CodeArtsRepo does not support service-specific condition keys in identity policies.It can only use global condition keys applicable to all services. For details, see Global Condition Keys.