Fetch a classification
Requires classification:read on this classification. Includes users
and roles, which are the principals holding this clearance. A request
authenticated by an API key is cleared through the user that owns the
key, so users is what decides whether a machine credential can read a
record carrying this label.
Authorizations
A machine credential, qk_ followed by its secret. Only a hash of the
secret is stored, so a key is displayed exactly once, when it is created
or rotated. A key reaches only the configurations it is linked to.
It may also be sent as Authorization: Bearer qk_..., which is
recognised by the prefix.
Path Parameters
The classification's id, or its slug. Either resolves.
"top-secret"
Response
The classification, with its cleared principals.
How policy statements and X-Qanapi-Classification name this label.
Users holding this clearance directly. Present on the list and fetch responses; absent after a create or an update.
Roles whose members hold this clearance. Present on the list and fetch responses; absent after a create or an update.