Workspaces

List User All Projects Access

List ALL projects in a workspace with detailed access info for a specific user.

This endpoint returns every project in the workspace with the user’s access status, effective role, and whether they have explicit permissions (overrides). Works for both full users and stub users.

Response logic by workspace role:

OWNER: has_access=True, role=FULL_ACCESS, is_override=False, is_explicit=False for all
MEMBER (no explicit): has_access=(project.default_role != NO_ACCESS), role=project.default_role, is_override=False, is_explicit=False
MEMBER (with explicit): has_access=(explicit_role != NO_ACCESS), role=explicit_role, is_override=True, is_explicit=True
MEMBER_LIMITED (with explicit): has_access=True, role=explicit_role, is_override=False, is_explicit=True
MEMBER_LIMITED (no explicit): has_access=False, role=None, is_override=False, is_explicit=False

Authorization: Requires workspace owner (ADMIN). Self-view is not allowed because it would leak project names the user does not have access to.

GET

workspaces

{workspace_id}

users

{user_id}

all-projects

List User All Projects Access

curl --request GET \
  --url https://api.aspect.inc/workspaces/{workspace_id}/users/{user_id}/all-projects \
  --header 'Authorization: Bearer <token>'

import requests

url = "https://api.aspect.inc/workspaces/{workspace_id}/users/{user_id}/all-projects"

headers = {"Authorization": "Bearer <token>"}

response = requests.get(url, headers=headers)

print(response.text)

const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};

fetch('https://api.aspect.inc/workspaces/{workspace_id}/users/{user_id}/all-projects', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.aspect.inc/workspaces/{workspace_id}/users/{user_id}/all-projects",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.aspect.inc/workspaces/{workspace_id}/users/{user_id}/all-projects"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://api.aspect.inc/workspaces/{workspace_id}/users/{user_id}/all-projects")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)
request["Authorization"] = 'Bearer <token>'

response = http.request(request)
puts response.read_body

[
  {
    "project_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "project_name": "<string>",
    "has_access": true,
    "default_role": "owner",
    "project_icon": {
      "type": "emoji",
      "emoji": "<string>",
      "color": "<string>",
      "url": "<string>",
      "upload": {
        "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
        "user_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
        "filename": "<string>",
        "mime_type": "<string>",
        "size_bytes": 123,
        "uploaded": true,
        "created": "2023-11-07T05:31:56Z",
        "updated": "2023-11-07T05:31:56Z",
        "url": "<string>",
        "url_expires_at": "2023-11-07T05:31:56Z"
      }
    },
    "role": "owner",
    "is_override": false,
    "is_explicit": false
  }
]

{
  "detail": [
    {
      "loc": [
        "<string>"
      ],
      "msg": "<string>",
      "type": "<string>"
    }
  ]
}

Authorizations

Authorization

string

header

required

JWT in Authorization header. 'Bearer ' prefix optional.

Path Parameters

workspace_id

string<uuid>

required

user_id

string<uuid>

required

Response

Successful Response

project_id

string<uuid>

required

Project ID

project_name

string

required

Project name

has_access

boolean

required

True if user can access this project

default_role

enum<string>

required

The project's default_role for reference (for UI to show 'Revert to X')

Available options:

owner,

member,

member_limited,

full_access,

editor,

commenter,

downloader,

viewer,

no_access

project_icon

CustomIconData · object | null

Project icon data

Show child attributes

role

enum<string> | null

User's effective role on this project (None if no access)

Available options:

owner,

member,

member_limited,

full_access,

editor,

commenter,

downloader,

viewer,

no_access

is_override

boolean

default:false

For MEMBER users: true if user has an explicit permission record (even if role matches default)

is_explicit

boolean

default:false

True if user has an explicit permission record on this project

List User All Projects Access

curl --request GET \
  --url https://api.aspect.inc/workspaces/{workspace_id}/users/{user_id}/all-projects \
  --header 'Authorization: Bearer <token>'

import requests

url = "https://api.aspect.inc/workspaces/{workspace_id}/users/{user_id}/all-projects"

headers = {"Authorization": "Bearer <token>"}

response = requests.get(url, headers=headers)

print(response.text)

const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};

fetch('https://api.aspect.inc/workspaces/{workspace_id}/users/{user_id}/all-projects', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.aspect.inc/workspaces/{workspace_id}/users/{user_id}/all-projects",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.aspect.inc/workspaces/{workspace_id}/users/{user_id}/all-projects"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://api.aspect.inc/workspaces/{workspace_id}/users/{user_id}/all-projects")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)
request["Authorization"] = 'Bearer <token>'

response = http.request(request)
puts response.read_body

[
  {
    "project_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "project_name": "<string>",
    "has_access": true,
    "default_role": "owner",
    "project_icon": {
      "type": "emoji",
      "emoji": "<string>",
      "color": "<string>",
      "url": "<string>",
      "upload": {
        "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
        "user_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
        "filename": "<string>",
        "mime_type": "<string>",
        "size_bytes": 123,
        "uploaded": true,
        "created": "2023-11-07T05:31:56Z",
        "updated": "2023-11-07T05:31:56Z",
        "url": "<string>",
        "url_expires_at": "2023-11-07T05:31:56Z"
      }
    },
    "role": "owner",
    "is_override": false,
    "is_explicit": false
  }
]

{
  "detail": [
    {
      "loc": [
        "<string>"
      ],
      "msg": "<string>",
      "type": "<string>"
    }
  ]
}

Overview

API Endpoints

List User All Projects Access

Authorizations

Path Parameters

Response