POST /drawers/record/reconcile
Owner administration or the explicitly assigned business permission is required. Actions are scoped to the signed-in branch. A request cannot be approved by its creator. Locked sessions return 423.
POST
/api/v1/security/drawers/{id}/reconcileAuthorization
AuthorizationBearer token (JWT) · headerrequiredJWT from POST /api/v1/auth/login sent as Authorization Bearer.
Path parameters
idstringrequiredThe staff, review, request or drawer identifier.
Request body
requiredapplication/jsonreasonstringrequiredmin length 3 · max length 500
Responses
200
Operation completed
any201
Record created
400
Invalid request
detailstringrequired401
Session expired or revoked
detailstringrequired403
Permission denied or self-approval
detailstringrequired409
Record changed or no longer actionable
detailstringrequired423
Register locked
detailstringrequired