GET /drawers
Owner administration or the explicitly assigned business permission is required. Actions are scoped to the signed-in branch. A request cannot be approved by its creator. Locked sessions return 423.
GET
/api/v1/security/drawersAuthorization
AuthorizationBearer token (JWT) · headerrequiredJWT from POST /api/v1/auth/login sent as Authorization Bearer.
Responses
200
Operation completed
any201
Record created
400
Invalid request
detailstringrequired401
Session expired or revoked
detailstringrequired403
Permission denied or self-approval
detailstringrequired409
Record changed or no longer actionable
detailstringrequired423
Register locked
detailstringrequired