Client Permissions

Client Permission Object

JSON

["STATS_TAB",
  "EDIT",
  "ADD_FLEX",
  "E_COMMERCE",
  "PUBLISH",
  "REPUBLISH",
  "DEV_MODE",
  "INSITE",
  "SEO",
  "BACKUPS",
  "CUSTOM_DOMAIN",
  "RESET",
  "BLOG",
  "PUSH_NOTIFICATIONS",
  "LIMITED_EDITING",
  "SITE_COMMENTS",
  "CONTENT_LIBRARY",
  "EDIT_CONNECTED_DATA",
  "MANAGE_CONNECTED_DATA",
  "USE_APP",
  "CLIENT_MANAGE_FREE_APPS",
  "AI_ASSISTANT"]

Permission	Dependency	Description
STATS_TAB	(None)	Access to statistics for this website.
EDIT	BLOG, LIMITED_EDITING	Allow the user to perform all possible edits to the website, such as delete and move elements, and add new content.
DEV_MODE	EDIT	Allow direct access to the HTML & CSS of the website. This still allows the user to use the HTML embed widget.
INSITE	EDIT	Add, edit, or delete existing website personalization rules.
E_COMMERCE	(None)	Manage catalogue, view orders and control store settings.
SEO	EDIT	Set SEO settings on the site or page level.
CUSTOM_DOMAIN	EDIT	Set or edit the domain of a website. Can only be accessed on published websites.
BLOG	(None)	Give access to write new posts, edit existing ones, and manage blog settings.
REPUBLISH	EDIT	Update the live site with all changes made in the editor.
PUBLISH	(None)	Publish the site for the first time.
ADD_FLEX	EDIT	Add Flex templates and sections in the editor.
BACKUPS	LIMITED_EDITING	Create, restore and delete backups.
RESET	LIMITED_EDITING	Reset and pick a new template for an existing site.
AI_ASSISTANT	(None)	Enable clients to use the AI Assistant to generate content.
LIMITED_EDITING	(None)	Edit existing widget content.
SITE_COMMENTS	(None)	Add, edit and delete site comments.
CONTENT_LIBRARY	LIMITED_EDITING	Manage site Content Library including images, business info, form responses, etc.
EDIT_CONNECTED_DATA	(None)	Edit connected content from the Connected Data popup.
MANAGE_CONNECTED_DATA	EDIT, EDIT_CONNECTED_DATA, CONTENT_LIBRARY	Add and manage widgets with Connected Data. Create and manage Dynamic Pages.
USE_APP	LIMITED_EDITING	Use all apps which are added to a site, requires editing permissions.
CLIENT_MANAGE_FREE_APPS	LIMITED_EDITING	Add, remove and use free apps. Use paid apps added by other users. Requires editing permissions.

List Client Permissions

List Client Permissions

GET https://api.duda.co/api/accounts/permissions/multiscreen

List all assignable permissions.

400: Bad Request

200: OK JSON

[ 'STATS_TAB',
  'EDIT',
  'ADD_FLEX',
  'E_COMMERCE',
  'PUBLISH',
  'REPUBLISH',
  'DEV_MODE',
  'INSITE',
  'SEO',
  'BACKUPS',
  'CUSTOM_DOMAIN',
  'RESET',
  'BLOG',
  'PUSH_NOTIFICATIONS',
  'LIMITED_EDITING',
  'SITE_COMMENTS',
  'CONTENT_LIBRARY',
  'EDIT_CONNECTED_DATA',
  'MANAGE_CONNECTED_DATA',
  'USE_APP',
  'CLIENT_MANAGE_FREE_APPS',
  "AI_ASSISTANT"]

Good to Know: We recommend updating your list of permissions on a daily basis and using blacklist of permissions you don't want customers to have access to. This way if Duda rolls out new features, you will give customers access to new features instead of limiting them.

curl

curl --request GET \
     --url https://api.duda.co/api/accounts/permissions/multiscreen \
     --header 'accept: application/json'

Get Client Permissions

Get Client Permissions

GET https://api.duda.co/api/accounts/{account_name}/sites/{site_name}/permissions

Returns the assigned Site permissions for an Account

Path Parameters

Name	Type	Description
account_name*	string	The account name is a unique reference to the account
site_name*	string	A valid site name of an existing website

400: Bad Request

200: OK object

{
  "permissions": [
    "STATS_TAB",
    "EDIT",
    "PUBLISH",
    "REPUBLISH",
    "STATS_EMAIL",
    "SEO",
    "CUSTOM_DOMAIN",
    "BACKUPS"
  ]
}

curl

curl --request GET \
     --url https://api.duda.co/api/accounts/account_name/sites/site_name/permissions \
     --header 'accept: application/json'

List Client Sites

List Client Sites

GET https://api.duda.co/api/accounts/grant-access/{account_name}/sites/multiscreen

List all Sites that an Account has access to.

Path Parameters

Name	Type	Description
account_name*	string	The account name is a unique reference to the account

200: OK array of objects

[
  {
    "site_name": "08e5f101"
  },
  {
    "site_name": "a7fa3956"
  },
  {
    "site_name": "u8elal2"
  }
]

400: Bad Request

curl

curl --request GET \
     --url https://api.duda.co/api/accounts/grant-access/account_name/sites/multiscreen \
     --header 'accept: application/json'

Grant Site Access

Grant Site Access

POST https://api.duda.co/api/accounts/{account_name}/sites/{site_name}/permissions

Grant access to a Site for an Account.

When giving customers access to a site, it is important to note that some permissions are dependent on other permissions being present. For example, you cannot give a customer access to a site's SEO if they do not have permission to edit the site first. See below for which permissions are dependent on others for each site type.

If you would like to update the permissions that a specific customer has to a site, you can call the same API to overwrite any existing permissions.

Path Parameters

Name	Type	Description
account_name*	string	The account name is a unique reference to the account
site_name*	string	A valid site name of an existing website

Request Body

Name	Type	Description
permissions	array of strings	List of permissions granted to the customer for the specified site

204: No Content

400: Bad Request

curl

curl --request POST \
     --url https://api.duda.co/api/accounts/account_name/sites/site_name/permissions \
     --header 'accept: application/json' \
     --header 'content-type: application/json' \
     --data '
{
  "permissions": [
    "EDIT",
    "PUBLISH"
  ]
}
'

Remove Site Access

Remove Site Access

DELETE https://api.duda.co/api/accounts/{account_name}/sites/{site_name}/permissions

Removes access to a Site for an Account.

Path Parameters

Name	Type	Description
account_name*	string	The account name is a unique reference to the account
site_name*	string	A valid site name of an existing website

204: No Content

400: Bad Request

curl

curl --request DELETE \
     --url https://api.duda.co/api/accounts/account_name/sites/site_name/permissions \
     --header 'accept: application/json'