POST /staff/record/revoke
Owner administration or the explicitly assigned business permission is required. Actions are scoped to the signed-in branch. A request cannot be approved by its creator. Locked sessions return 423.
POST
/api/v1/security/staff/{id}/revokeAuthorization
AuthorizationBearer token (JWT) · headerrequiredJWT from POST /api/v1/auth/login sent as Authorization Bearer.
Path parameters
idstringrequiredThe staff, review, request or drawer identifier.
Responses
200
Operation completed
any201
Record created
400
Invalid request
detailstringrequired401
Session expired or revoked
detailstringrequired403
Permission denied or self-approval
detailstringrequired409
Record changed or no longer actionable
detailstringrequired423
Register locked
detailstringrequired