{"templateId":"markdown","sharedDataIds":{"sidebar":"sidebar-@l10n/ru/apis/sidebars.yaml"},"props":{"metadata":{"markdoc":{"tagList":["quickfacts","fact","tilegrid","tile","intent","intentcell","admonition","eventexplorer","eventkind","cap"]},"type":"markdown"},"seo":{"title":"Права доступа и области","projectTitle":"Vilna Docs","description":"Как работают права доступа Vilna API: строка через двоеточие, её форма по сервисам, полный каталог и как роли и ключи её несут.","siteUrl":"https://docs.vilna.io","lang":"en-US","image":"https://cdn.vilna.io/docs/og/26103121/ru/apis-permissions.png","meta":[{"name":"og:type","content":"website"},{"name":"og:site_name","content":"Vilna Documentation"},{"name":"og:image:width","content":"1200"},{"name":"og:image:height","content":"630"},{"name":"twitter:card","content":"summary_large_image"},{"name":"robots","content":"max-image-preview:large"}],"llmstxt":{"title":"Vilna API Documentation","description":"Vilna Platform API monitors public blockchain activity, balances and invoices and delivers signed webhooks. It does not sign or broadcast transactions. VKS separately coordinates account setup, signer approvals and signing, retains signed results and can submit a complete transaction to a node. Node acceptance is not blockchain confirmation. Each API uses its own scoped credential in X-Api-Key. Workspace setup and VKS-key issuance start in the Dashboard.\n","details":{"content":"**Platform monitoring.** Platform observes merchant-controlled addresses,\nsupplied directly or derived from the merchant's extended public key (xPub).\nInvoices report incoming on-chain activity; they do not initiate transfers.\n\n**APIs and their credentials.**\n\n- Platform API (api.vilna.io) - monitor addresses and extended public keys, read\n  balances and transactions, reconcile incoming payments, create invoices, and\n  receive events.\n- Blockchain RPC (rpc.vilna.io) - JSON-RPC and gRPC node access across every\n  supported network behind one key.\n- Management API (mgmt.vilna.io) - published workspace, project, member and key\n  operations, with Dashboard bootstrap and credential grant limits.\n- VKS API (vks.vilna.io) - workspace signers, vaults, accounts, signing requests,\n  signed results and optional asynchronous send. Uses a Dashboard-issued VKS key\n  with vks:access; the public Management API has no VKS-key issuance route.\n\n**Pages with no markdown source**, so they cannot be linked below:\n\n- Product overview: https://docs.vilna.io/\n- All guides: https://docs.vilna.io/guides\n"},"excludeFiles":["legal/terms.md","legal/privacy.md","legal/cookies.md","@l10n/ru/legal/terms.md","@l10n/ru/legal/privacy.md","@l10n/ru/legal/cookies.md"],"sections":[{"title":"Getting Started","description":"What the platform is, how to make a first call, and answers to common questions","includeFiles":["get-started/quickstart.md","get-started/dashboard.md","get-started/core-concepts.md","get-started/members.md","get-started/faq.md"]},{"title":"API Reference","description":"Authentication, permissions, idempotency, errors, standards, and per-service endpoint documentation","includeFiles":["apis/authentication.md","apis/permissions.md","apis/idempotency.md","apis/errors.md","apis/standards.md","apis/networks.md","apis/platform/@v2/index.md","apis/platform/@v2/webhooks.md","apis/platform/@v2/api.yaml","apis/mgmt/index.md","apis/mgmt/api.yaml","apis/vks/index.md","apis/vks/api.yaml","apis/rpc/index.md","apis/rpc/json-rpc.md","apis/rpc/grpc.md"]},{"title":"Developer Guides","description":"Integration patterns, events, notifications, and tooling","includeFiles":["guides/events.md","guides/channels.md","guides/tokens.md","guides/integration-patterns.md","guides/mcp.md","guides/simulation.md","guides/invoices.md","guides/vks.md"]},{"title":"Trust and custody","description":"The non-custodial model in plain terms","includeFiles":["legal/non-custodial.md"]},{"title":"Optional","description":"Background reading and release history","includeFiles":["get-started/blockchain-basics.md","changelog.md"]}]},"priority":0.6,"jsonLd":{"@context":"https://schema.org","@graph":[{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Главная","item":"https://docs.vilna.io/ru/"},{"@type":"ListItem","position":2,"name":"Справочник API","item":"https://docs.vilna.io/ru/apis"},{"@type":"ListItem","position":3,"name":"Права доступа"}]}]}},"dynamicMarkdocComponents":[],"compilationErrors":[],"ast":{"$$mdtype":"Tag","name":"article","attributes":{},"children":[{"$$mdtype":"Tag","name":"Heading","attributes":{"level":1,"id":"права-доступа","__idx":0},"children":["Права доступа"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Права доступа определяют, что может делать API-ключ или участник команды. Каждое право - строка через двоеточие, например ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["api:address:read"]},", читается слева направо - а сколько в ней сегментов, зависит от того, какому из сервисов оно принадлежит. Эта страница - сама модель доступа; о том, кто какое место занимает в команде, читайте в разделе ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/ru/get-started/members"},"children":["Участники и роли"]},"."]},{"$$mdtype":"Tag","name":"QuickFacts","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"Fact","attributes":{"icon":"layers"},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["api"]}," · ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["rpc"]}," · ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["mgt"]}," · ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["vks"]}]}," ",{"$$mdtype":"Tag","name":"Fact","attributes":{"icon":"check-double"},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["read"]}," · ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["write"]}," · ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["delete"]}]}," ",{"$$mdtype":"Tag","name":"Fact","attributes":{"icon":"search"},"children":["Проверка точным совпадением"]}," ",{"$$mdtype":"Tag","name":"Fact","attributes":{"icon":"lock"},"children":["Фиксируются при создании"]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"id":"model","level":2,"__idx":1},"children":["Модель прав "]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Право - строка через двоеточие, читается слева направо: ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["область"]}," (",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["scope"]},") - сервис (",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["api"]},", ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["rpc"]}," или ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["mgt"]},"), ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["ресурс"]}," (",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["resource"]},") - объект, например ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["address"]}," или ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["member"]},", и ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["действие"]}," (",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["action"]},") - ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["read"]},", ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["write"]}," или ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["delete"]},"."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Platform API использует все три. RPC предоставляет одну возможность, поэтому опускает ресурс; Management API вставляет сегмент ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["level"]}," - ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["workspace"]}," или ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["project"]}," - перед ресурсом, и получается четыре части:"]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Сервис"},"children":["Сервис"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Формат"},"children":["Формат"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Пример"},"children":["Пример"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Platform API"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["api:{resource}:{action}"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["api:address:read"]}]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Blockchain RPC"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["rpc:{action}"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["rpc:call"]}]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Management API"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["mgt:{level}:{resource}:{action}"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["mgt:workspace:member:write"]}]}]}]}]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Проверки - точное совпадение строк, без подразумеваемой иерархии. Ключ с ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["api:address:read"]}," может просматривать адреса, но для регистрации нужен ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["api:address:write"]},". Выдавайте каждое действие, которое реально используете."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"id":"actions","level":2,"__idx":2},"children":["Три действия "]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Три глагола покрывают почти любой ресурс и означают одно и то же в любой области:"]},{"$$mdtype":"Tag","name":"TileGrid","attributes":{"cols":"3"},"children":[{"$$mdtype":"Tag","name":"Tile","attributes":{"icon":"search","title":"read"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Списки и просмотр объектов. Только чтение - состояние не меняется."]}]},{"$$mdtype":"Tag","name":"Tile","attributes":{"icon":"zap","title":"write"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Создание новых объектов и обновление существующих."]}]},{"$$mdtype":"Tag","name":"Tile","attributes":{"icon":"alert","title":"delete"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Безвозвратное удаление объектов. Поддерживается не каждым ресурсом."]}]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Две операции используют четвёртое действие, ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["call"]},": ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["rpc:call"]}," отправляет запрос к узлу, а ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["api:simulate:call"]}," запускает симуляцию транзакции."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"id":"attach","level":2,"__idx":3},"children":["Как привязываются права "]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Права не существуют сами по себе - их всегда что-то несёт. Ключ и участник получают свой набор по-разному:"]},{"$$mdtype":"Tag","name":"Intent","attributes":{},"children":[{"$$mdtype":"Tag","name":"IntentCell","attributes":{"label":"Ключи","icon":"lock"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Несут ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["фиксированный набор"]},", выбранный при создании. API-ключ получает права ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["api"]},", которые вы выбрали (в рамках одного проекта); RPC-ключ - ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["rpc:call"]},"; управляющий ключ - безопасное подмножество прав ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["mgt"]},"."]}]},{"$$mdtype":"Tag","name":"IntentCell","attributes":{"label":"Участники","icon":"users"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/ru/get-started/members"},"children":["Роль"]}," задаёт права участника по умолчанию. Уполномоченный пользователь может отдельно управлять правом участника ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["vks:access"]}," через сессию личного кабинета."]}]}]},{"$$mdtype":"Tag","name":"Admonition","attributes":{"type":"warning","name":"Ключи фиксируются при создании"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Эндпоинта, чтобы расширить или сузить ключ после создания, нет. Чтобы изменить, что может ключ, отзовите его и создайте новый с нужными правами."]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"id":"services","level":2,"__idx":4},"children":["Права по сервисам "]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Выберите область, чтобы увидеть все её права. Область - первый сегмент строки - это и есть сервис, которому принадлежит право."]},{"$$mdtype":"Tag","name":"EventExplorer","attributes":{},"children":[{"$$mdtype":"Tag","name":"EventKind","attributes":{"name":"api","desc":"Platform API - операции с блокчейном в рамках проекта.","chains":"В рамках проекта, vilna_api_"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Форма ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["api:{resource}:{action}"]},". Каждый ресурс поддерживает свой набор действий:"]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"ресурс"},"children":["ресурс"]},{"$$mdtype":"Tag","name":"th","attributes":{"align":"center","data-label":"read"},"children":["read"]},{"$$mdtype":"Tag","name":"th","attributes":{"align":"center","data-label":"write"},"children":["write"]},{"$$mdtype":"Tag","name":"th","attributes":{"align":"center","data-label":"delete"},"children":["delete"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["address"]}]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"center"},"children":[{"$$mdtype":"Tag","name":"Cap","attributes":{"on":true},"children":[]}]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"center"},"children":[{"$$mdtype":"Tag","name":"Cap","attributes":{"on":true},"children":[]}]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"center"},"children":[{"$$mdtype":"Tag","name":"Cap","attributes":{"on":true},"children":[]}]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["limits"]}]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"center"},"children":[{"$$mdtype":"Tag","name":"Cap","attributes":{"on":true},"children":[]}]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"center"},"children":["-"]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"center"},"children":["-"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["activity"]}]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"center"},"children":[{"$$mdtype":"Tag","name":"Cap","attributes":{"on":true},"children":[]}]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"center"},"children":["-"]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"center"},"children":["-"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["transaction"]}]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"center"},"children":[{"$$mdtype":"Tag","name":"Cap","attributes":{"on":true},"children":[]}]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"center"},"children":["-"]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"center"},"children":["-"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["blockchain"]}]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"center"},"children":[{"$$mdtype":"Tag","name":"Cap","attributes":{"on":true},"children":[]}]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"center"},"children":["-"]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"center"},"children":["-"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["balance"]}]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"center"},"children":[{"$$mdtype":"Tag","name":"Cap","attributes":{"on":true},"children":[]}]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"center"},"children":["-"]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"center"},"children":["-"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["asset"]}]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"center"},"children":[{"$$mdtype":"Tag","name":"Cap","attributes":{"on":true},"children":[]}]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"center"},"children":[{"$$mdtype":"Tag","name":"Cap","attributes":{"on":true},"children":[]}]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"center"},"children":["-"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["subscription"]}]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"center"},"children":[{"$$mdtype":"Tag","name":"Cap","attributes":{"on":true},"children":[]}]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"center"},"children":[{"$$mdtype":"Tag","name":"Cap","attributes":{"on":true},"children":[]}]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"center"},"children":[{"$$mdtype":"Tag","name":"Cap","attributes":{"on":true},"children":[]}]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["channel"]}]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"center"},"children":[{"$$mdtype":"Tag","name":"Cap","attributes":{"on":true},"children":[]}]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"center"},"children":[{"$$mdtype":"Tag","name":"Cap","attributes":{"on":true},"children":[]}]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"center"},"children":[{"$$mdtype":"Tag","name":"Cap","attributes":{"on":true},"children":[]}]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["public_key"]}]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"center"},"children":[{"$$mdtype":"Tag","name":"Cap","attributes":{"on":true},"children":[]}]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"center"},"children":[{"$$mdtype":"Tag","name":"Cap","attributes":{"on":true},"children":[]}]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"center"},"children":[{"$$mdtype":"Tag","name":"Cap","attributes":{"on":true},"children":[]}]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["invoice"]}]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"center"},"children":[{"$$mdtype":"Tag","name":"Cap","attributes":{"on":true},"children":[]}]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"center"},"children":[{"$$mdtype":"Tag","name":"Cap","attributes":{"on":true},"children":[]}]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"center"},"children":[{"$$mdtype":"Tag","name":"Cap","attributes":{"on":true},"children":[]}]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["token_tag"]}]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"center"},"children":[{"$$mdtype":"Tag","name":"Cap","attributes":{"on":true},"children":[]}]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"center"},"children":[{"$$mdtype":"Tag","name":"Cap","attributes":{"on":true},"children":[]}]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"center"},"children":[{"$$mdtype":"Tag","name":"Cap","attributes":{"on":true},"children":[]}]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["address_tag"]}]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"center"},"children":[{"$$mdtype":"Tag","name":"Cap","attributes":{"on":true},"children":[]}]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"center"},"children":[{"$$mdtype":"Tag","name":"Cap","attributes":{"on":true},"children":[]}]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"center"},"children":[{"$$mdtype":"Tag","name":"Cap","attributes":{"on":true},"children":[]}]}]}]}]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Ещё одно вне сетки: ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["api:simulate:call"]}," запускает симуляцию транзакции."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["api:activity:read"]}," разрешает чтение активности через ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["GET /v2/activity"]},". Для списка и просмотра транзакций требуется ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["api:transaction:read"]},". Если интеграция читает активность и транзакции, выдайте оба права."]}]},{"$$mdtype":"Tag","name":"EventKind","attributes":{"name":"mgt","desc":"Management API - администрирование пространства и проектов.","chains":"В рамках пространства, vilna_mgt_"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Форма ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["mgt:{level}:{resource}:{action}"]},". Права делятся на уровень пространства и уровень проекта - читайте каждую ячейку как полную строку из четырёх сегментов."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Уровень пространства"]}," - ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["mgt:workspace:{resource}:{action}"]}]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"ресурс"},"children":["ресурс"]},{"$$mdtype":"Tag","name":"th","attributes":{"align":"center","data-label":"read"},"children":["read"]},{"$$mdtype":"Tag","name":"th","attributes":{"align":"center","data-label":"write"},"children":["write"]},{"$$mdtype":"Tag","name":"th","attributes":{"align":"center","data-label":"delete"},"children":["delete"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["self"]}]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"center"},"children":[{"$$mdtype":"Tag","name":"Cap","attributes":{"on":true},"children":[]}]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"center"},"children":["-"]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"center"},"children":["-"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["member"]}]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"center"},"children":[{"$$mdtype":"Tag","name":"Cap","attributes":{"on":true},"children":[]}]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"center"},"children":[{"$$mdtype":"Tag","name":"Cap","attributes":{"on":true},"children":[]}]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"center"},"children":[{"$$mdtype":"Tag","name":"Cap","attributes":{"on":true},"children":[]}]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["project"]}]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"center"},"children":[{"$$mdtype":"Tag","name":"Cap","attributes":{"on":true},"children":[]}]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"center"},"children":[{"$$mdtype":"Tag","name":"Cap","attributes":{"on":true},"children":[]}]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"center"},"children":["-"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["rpc_key"]}]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"center"},"children":[{"$$mdtype":"Tag","name":"Cap","attributes":{"on":true},"children":[]}]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"center"},"children":[{"$$mdtype":"Tag","name":"Cap","attributes":{"on":true},"children":[]}]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"center"},"children":["-"]}]}]}]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["mgt:workspace:member:*"]}," также покрывает назначение, изменение и удаление участников проекта - отдельной строки ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["mgt:project:member:*"]}," не существует."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Уровень проекта"]}," - ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["mgt:project:{resource}:{action}"]}]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"ресурс"},"children":["ресурс"]},{"$$mdtype":"Tag","name":"th","attributes":{"align":"center","data-label":"read"},"children":["read"]},{"$$mdtype":"Tag","name":"th","attributes":{"align":"center","data-label":"write"},"children":["write"]},{"$$mdtype":"Tag","name":"th","attributes":{"align":"center","data-label":"delete"},"children":["delete"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["self"]}]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"center"},"children":["-"]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"center"},"children":["-"]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"center"},"children":[{"$$mdtype":"Tag","name":"Cap","attributes":{"on":true},"children":[]}]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["api_key"]}]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"center"},"children":[{"$$mdtype":"Tag","name":"Cap","attributes":{"on":true},"children":[]}]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"center"},"children":[{"$$mdtype":"Tag","name":"Cap","attributes":{"on":true},"children":[]}]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"center"},"children":["-"]}]}]}]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["mgt:project:self:delete"]}," удаляет сам проект; больше ничего не использует ресурс ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["self"]}," на уровне проекта."]}]},{"$$mdtype":"Tag","name":"EventKind","attributes":{"name":"rpc","desc":"Blockchain RPC - прямой доступ к узлам во всех сетях.","chains":"В рамках пространства, vilna_rpc_"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Форма ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["rpc:{action}"]}," - без сегмента ресурса."]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Право"},"children":["Право"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Что даёт"},"children":["Что даёт"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["rpc:call"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Отправка запросов JSON-RPC и gRPC к любой поддерживаемой сети"]}]}]}]}]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"id":"management-key-limits","level":2,"__idx":5},"children":["Ограничения управляющего ключа "]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Управляющий ключ может получать список и метаданные API/RPC-ключей с соответствующим правом ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["read"]},". Для создания и отзыва API-ключей требуется ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["mgt:project:api_key:write"]},", для создания и отзыва RPC-ключей - ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["mgt:workspace:rpc_key:write"]},"."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Следующие действия требуют пользовательской сессии в личном кабинете и соответствующей роли в рабочем пространстве:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Управляющие ключи"]}," - получение списка, просмотр, создание и отзыв. Права ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["mgt:workspace:mgt_key:read"]}," и ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["mgt:workspace:mgt_key:write"]}," нельзя выдать управляющему ключу."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["VKS-ключи"]}," - получение списка, просмотр, создание и отзыв; доступны владельцу и администраторам рабочего пространства."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Удаление или передача рабочего пространства"]}," - доступны только его владельцу."]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Ранее выданные права доступа к управляющим ключам могут сохраняться в сведениях о старом ключе. Они не дают доступа к операциям с управляющими ключами и недоступны при выпуске нового ключа."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"id":"roles","level":2,"__idx":6},"children":["Роли и права "]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Роли задают приведённые ниже наборы прав по умолчанию: роль в пространстве даёт права ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["mgt"]},", роль в проекте - права ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["api"]},". Owner и Admin рабочего пространства получают доступ к VKS автоматически. Для Member нужно отдельно выдать ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["vks:access"]}," через личный кабинет. Это не меняет его роль в проекте или права API-ключей."]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Роль"},"children":["Роль"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Уровень"},"children":["Уровень"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Набор прав"},"children":["Набор прав"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Owner"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Пространство"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Всё, что у Admin, плюс удаление или передача пространства. Один владелец на пространство, назначается при создании."]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Admin"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Пространство"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Полные ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["mgt"]}," и ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["api"]}," - управление участниками, проектами и ключами, но без удаления или передачи пространства."]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Member"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Пространство"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Только чтение на уровне пространства; доступ лишь к назначенным проектам."]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Editor"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Проект"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["api"]}," чтение, запись и удаление ресурсов проекта."]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Viewer"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Проект"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Чтение ресурсов проекта и симуляция транзакций (",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["api:simulate:call"]},")."]}]}]}]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Владелец или админ пространства управляет всеми проектами автоматически; участнику нужно место Editor или Viewer в каждом проекте. Полные описания мест и как пригласить или изменить участника - в разделе ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/ru/get-started/members"},"children":["Участники и роли"]},"."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"id":"denied","level":2,"__idx":7},"children":["Когда в доступе отказано "]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Действительный ключ без нужного права получает ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/ru/apis/errors#forbidden"},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["403 Forbidden"]}]},". Сверьте требуемое операцией право с правами ключа. Чтобы изменить набор прав, выпустите новый ключ и отзовите старый."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"id":"vks","level":2,"__idx":8},"children":["VKS "]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Все публичные операции VKS требуют ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["vks:access"]}," в VKS-ключе рабочего пространства, включая чтение, создание, удаление и отправку. Это отдельное право доступа ко всему публичному VKS API, без разделения на read/write. Выпускайте ключ в кабинете; наличие прав ролей в кабинете не означает наличия операции выпуска в публичном Management API. См. ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/ru/apis/vks"},"children":["VKS"]},"."]}]},"headings":[{"value":"Права доступа","id":"права-доступа","depth":1},{"value":"Модель прав","id":"model","depth":2},{"value":"Три действия","id":"actions","depth":2},{"value":"Как привязываются права","id":"attach","depth":2},{"value":"Права по сервисам","id":"services","depth":2},{"value":"Ограничения управляющего ключа","id":"management-key-limits","depth":2},{"value":"Роли и права","id":"roles","depth":2},{"value":"Когда в доступе отказано","id":"denied","depth":2},{"value":"VKS","id":"vks","depth":2}],"frontmatter":{"seo":{"title":"Права доступа и области","description":"Как работают права доступа Vilna API: строка через двоеточие, её форма по сервисам, полный каталог и как роли и ключи её несут.","priority":0.6,"image":"https://cdn.vilna.io/docs/og/26103121/ru/apis-permissions.png","jsonLd":{"@context":"https://schema.org","@graph":[{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Главная","item":"https://docs.vilna.io/ru/"},{"@type":"ListItem","position":2,"name":"Справочник API","item":"https://docs.vilna.io/ru/apis"},{"@type":"ListItem","position":3,"name":"Права доступа"}]}]}}},"lastModified":"2026-11-05T09:40:36.000Z","pagePropGetterError":{"message":"","name":""}},"slug":"/ru/apis/permissions","userData":{"isAuthenticated":false,"teams":["anonymous"]},"isPublic":true}