Skip to main content
ONTAP Automation

Delete an access control entry

Contributors dmp-netapp
PDFs

You can delete an existing Access Control Entry (ACE) from a specific file or folder. The change propagates to any child objects.

Step 1: Delete the ACE

HTTP method and endpoint

This REST API call uses the following method and endpoint.

HTTP method Path

DELETE

/api/protocols/file-security/permissions/{svm.uuid}/{path}
Processing type

Asynchronous

Additional input parameters for curl examples

In addition to the parameters common with all REST API calls, the following parameters are also used in the curl example in this step.

Parameter Type Required Description

$SVM_ID

Path

Yes

This is the UUID of the SVM containing the file.

$FILE_PATH

Path

Yes

This is the path to the file or folder.
Curl example
curl --request DELETE --location "https://$FQDN_IP/api/protocols/file-security/permissions/$SVM_ID/$FILE_PATH?return_timeout=0" --include --header "Accept */*" --header "Authorization: Basic $BASIC_AUTH" --data '{ \"access\": \"access_allow\", \"apply_to\": { \"files\": true, \"sub_folders\": true, \"this_folder\": true }, \"ignore_paths\": [ \"/parent/child2\" ], \"propagation_mode\": \"propagate\"}'
JSON output example
{
  "job": {
    "uuid": "3015c294-5bbc-11eb-9c4e-0050568e8682",
    "_links": {
      "self": {
        "href": "/api/cluster/jobs/3015c294-5bbc-11eb-9c4e-0050568e8682"
      }
    }
  }
}

Step 2: Retrieve the status of the job

Perform the workflow Get job instance and confirm the state value is success.