Daftar permission yang tersedia untuk API key API.
Scopes menentukan hak akses API key. Jika sebuah endpoint membutuhkan scope tertentu dan API key tidak memilikinya, request akan ditolak.
Daftar Scopes
| Area | Scope |
|---|
| Orders | orders:read |
| Orders | orders:write |
| Orders | orders:delete |
| Checkout | checkout:read |
| Coupons | coupons:read |
| Coupons | coupons:write |
| Coupons | coupons:delete |
| Products | products:read |
| Products | products:write |
| Products | products:delete |
| Subscriptions | subscriptions:read |
| Subscriptions | subscriptions:write |
| Subscriptions | subscriptions:delete |
| Commissions | commissions:read |
| Commissions | commissions:write |
| Commissions | commissions:delete |
| Affiliates | affiliates:read |
| Users | users:read |
| Users | users:write |
| Users | users:delete |
| Sessions | sessions:write |
| User Groups | user-groups:read |
| Locations | locations:read |
| Access | access:read |
| Access | access:write |
| Access | access:delete |
| Reminders | reminders:read |
| Reminders | reminders:write |
| Confirmations | confirmations:read |
| Confirmations | confirmations:write |
| Confirmations | confirmations:delete |
| Payments | payments:read |
| Payments | payments:write |
| Licenses | licenses:read |
| Licenses | licenses:write |
Contoh Kombinasi Scopes
Integrasi laporan order
orders:read
products:read
users:read
Integrasi checkout
checkout:read
products:read
coupons:read
orders:write
Integrasi admin produk dan order
products:read
products:write
orders:read
orders:write
orders:delete
Dashboard affiliate internal
affiliates:read
commissions:read
products:read
Membuat user-session untuk endpoint /me
Gunakan scope ini hanya pada API key yang disimpan di backend/internal app, bukan di frontend publik.
Rekomendasi
Gunakan prinsip least privilege: berikan hanya scope yang benar-benar dibutuhkan oleh integrasi.