capabilities.work

Permissioned Synced Record Retrieval

A 4-step recipe with Paragon. We can help you get access.

Recipe · 4 steps

Permissioned Synced Record Retrieval

with Paragon

Resolve a synced record, enforce source-system permissions, then download content.

  1. Pull the first page of normalized records for the integration and sync type to establish the working set.
  2. Retrieve the full normalized record, including its captured source-system permissions, for the chosen record ID.
  3. Run a ReBAC-style access check to confirm the requesting subject has the required relation to the object before any content is read.
  4. Download the binary content of the file-type record now that access has been confirmed for the requesting subject.
What you'll need to have ready
  • projectId: Your Paragon Project ID.
  • integration: Integration identifier (e.g. googleDrive).
  • syncType: The sync pipeline type (e.g. files).
  • recordId: The synced record ID to retrieve and download.
  • subject: The requesting actor (e.g. user@example.com).
  • relation: The relation to check (e.g. viewer, editor, owner).
  • object: The object identifier to check access against (e.g. file:abc123).
For your developer

Arazzo workflow paragon:permissioned-record-retrieval, 4 operations: pullSyncedRecords → getSyncedRecord → checkAccess → downloadContent. Specs on APIs.io.

More recipes with Paragon

Disconnect a User Integration and ConfirmDiscover and Run an ActionKit ActionEnable a Sync and Pull RecordsFind and Replay a Failed Workflow ExecutionFind and Manage a Trigger SubscriptionPreview and Subscribe to a TriggerVerify Integration then Proxy a Request