I am looking for a good way to figure out what privileges a user has via the Sitecore RESTful API.

For example, I can use the RESTful API for ItemService:


This allows me to get the security string set directly on an item and looks like this:

"__Security": "au|sitecore\\User|pe|+item:read|+item:rename|"

However, if the user has rights to that item that are inherited from the parent, it does not show up in the __Security field.

Is there another way I can use the Sitecore RESTful API to determine which privileges a user has on a Sitecore item?

1 Answer 1


Sitecore security model does provide API for determining user access rights (see Sitecore.Security.AccessControl.ItemAccess class). AFAIK there is no any web service exposing it but you can easily create one using Sitecore Services Client:

public class AccessController : ServicesApiController
    public IHttpActionResult Get(string database, string itemId)
        // simplified. no null check
        var item = Database.GetDatabase(database).GetItem(itemId);
        var model = new ItemAccessDto
            CanRead = item.Access.CanRead(),
            CanWrite = item.Access.CanWrite(),
            CanCreate = item.Access.CanCreate(),
            CanDelete = item.Access.CanDelete(),

        return Ok(model);

    private class ItemAccessDto
        public bool CanRead { get; set; }

        public bool CanWrite { get; set; }

        public bool CanCreate { get; set; }

        public bool CanDelete { get; set; }

Now you can request user access info. That is what an anonymous user can do with the default Home item:


    "can_read": true,
    "can_write": false,
    "can_create": false,
    "can_delete": false

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.