{ "info": { "_postman_id": "b0748fb8-9927-4b79-96cd-5db3c12b64bf", "name": "AttestPath Mobile API", "description": "REST API for the AttestPath mobile application.\n\n## Authentication\n1. Call `POST /api/login` with email and password.\n2. Store the returned `data.token` value.\n3. Send `Authorization: Bearer {token}` on all protected requests.\n4. Token lifetime is 90 days (`data.expires_in` seconds).\n\n## Response format\nAll endpoints return JSON:\n```json\n{ \"status\": true|false, \"message\": \"...\", \"data\": { ... }, \"errors\": { ... } }\n```\n\n## Control pages & ATST detail\n1. List controls via `GET /api/control-pages/catalog`.\n2. Open a control via `GET /api/control-pages/{moduleCode}` \u2014 returns policies + `atst_validation` matrix (`convention_id`, `atst_code`, PASS/FAIL).\n3. Open an ATST row via `GET /api/atst/{conventionId}` \u2014 evidence uploads, remediation tickets, control tasks, and phrase-matched synced evidence are scoped by `convention_id`.\nUse module **route** as `{moduleCode}` (e.g. `code-of-conduct`). Sync integrations remain under `/api/control-pages/{moduleCode}/sync/...`.\n\n\nContact Support:\n Name: AttestPath Support\n Email: info@attestpath.ai", "schema": "https://schema.getpostman.com/json/collection/v2.1.0/collection.json", "_exporter_id": "3587513", "_collection_link": "https://go.postman.co/collection/3587513-b0748fb8-9927-4b79-96cd-5db3c12b64bf?source=collection_link" }, "item": [ { "name": "api", "item": [ { "name": "login", "item": [ { "name": "Login", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"email\": \"user@company.com\",\n \"password\": \"Password1!\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/login", "host": [ "{{baseUrl}}" ], "path": [ "api", "login" ] } }, "response": [ { "name": "Login successful", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"email\": \"user@company.com\",\n \"password\": \"Password1!\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/login", "host": [ "{{baseUrl}}" ], "path": [ "api", "login" ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {\n \"token\": \"string\",\n \"token_type\": \"Bearer\",\n \"expires_in\": 7776000,\n \"user\": {\n \"id\": 8859,\n \"email\": \"string\",\n \"full_name\": \"string\",\n \"organization_id\": 5592\n }\n }\n}" }, { "name": "Missing or invalid token", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"email\": \"user@company.com\",\n \"password\": \"Password1!\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/login", "host": [ "{{baseUrl}}" ], "path": [ "api", "login" ] } }, "status": "Unauthorized", "code": 401, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": false,\n \"message\": \"string\",\n \"errors\": {\n \"key_0\": 810,\n \"key_1\": \"string\"\n }\n}" }, { "name": "Validation failed", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"email\": \"user@company.com\",\n \"password\": \"Password1!\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/login", "host": [ "{{baseUrl}}" ], "path": [ "api", "login" ] } }, "status": "Unprocessable Entity (WebDAV) (RFC 4918)", "code": 422, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": false,\n \"message\": \"string\",\n \"errors\": {\n \"key_0\": 810,\n \"key_1\": \"string\"\n }\n}" } ] } ] }, { "name": "refresh", "item": [ { "name": "Refresh Bearer token", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/refresh", "host": [ "{{baseUrl}}" ], "path": [ "api", "refresh" ] }, "description": "Rotates the API token. Accepts a still-valid token, or one that expired within the last 30 days. Public (no apiauth). Send via Authorization: Bearer or JSON body token.", "body": { "mode": "raw", "raw": "{\n \"token\": \"{{bearerToken}}\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "response": [ { "name": "Success", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/refresh", "host": [ "{{baseUrl}}" ], "path": [ "api", "refresh" ] }, "body": { "mode": "raw", "raw": "{\n \"token\": \"{{bearerToken}}\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] } ] }, { "name": "forgot-password", "item": [ { "name": "Request password reset OTP", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"email\": \"user@company.com\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/forgot-password", "host": [ "{{baseUrl}}" ], "path": [ "api", "forgot-password" ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"email\": \"user@company.com\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/forgot-password", "host": [ "{{baseUrl}}" ], "path": [ "api", "forgot-password" ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" }, { "name": "Validation failed", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"email\": \"user@company.com\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/forgot-password", "host": [ "{{baseUrl}}" ], "path": [ "api", "forgot-password" ] } }, "status": "Unprocessable Entity (WebDAV) (RFC 4918)", "code": 422, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": false,\n \"message\": \"string\",\n \"errors\": {\n \"key_0\": 810,\n \"key_1\": \"string\"\n }\n}" }, { "name": "Too many attempts", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"email\": \"user@company.com\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/forgot-password", "host": [ "{{baseUrl}}" ], "path": [ "api", "forgot-password" ] } }, "status": "Too Many Requests", "code": 429, "_postman_previewlanguage": "text", "header": [], "cookie": [], "body": "" } ] } ] }, { "name": "reset-password", "item": [ { "name": "Reset password with email OTP", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"email\": \"FQFVJex@KaBGju.zbi\",\n \"otp\": \"123456\",\n \"password\": \"Password1!\",\n \"password_confirm\": \"Password1!\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/reset-password", "host": [ "{{baseUrl}}" ], "path": [ "api", "reset-password" ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"email\": \"FQFVJex@KaBGju.zbi\",\n \"otp\": \"123456\",\n \"password\": \"Password1!\",\n \"password_confirm\": \"Password1!\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/reset-password", "host": [ "{{baseUrl}}" ], "path": [ "api", "reset-password" ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" }, { "name": "Not found", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"email\": \"FQFVJex@KaBGju.zbi\",\n \"otp\": \"123456\",\n \"password\": \"Password1!\",\n \"password_confirm\": \"Password1!\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/reset-password", "host": [ "{{baseUrl}}" ], "path": [ "api", "reset-password" ] } }, "status": "Not Found", "code": 404, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": false,\n \"message\": \"string\",\n \"errors\": {\n \"key_0\": 810,\n \"key_1\": \"string\"\n }\n}" }, { "name": "Validation failed", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"email\": \"FQFVJex@KaBGju.zbi\",\n \"otp\": \"123456\",\n \"password\": \"Password1!\",\n \"password_confirm\": \"Password1!\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/reset-password", "host": [ "{{baseUrl}}" ], "path": [ "api", "reset-password" ] } }, "status": "Unprocessable Entity (WebDAV) (RFC 4918)", "code": 422, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": false,\n \"message\": \"string\",\n \"errors\": {\n \"key_0\": 810,\n \"key_1\": \"string\"\n }\n}" }, { "name": "Too many attempts", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"email\": \"FQFVJex@KaBGju.zbi\",\n \"otp\": \"123456\",\n \"password\": \"Password1!\",\n \"password_confirm\": \"Password1!\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/reset-password", "host": [ "{{baseUrl}}" ], "path": [ "api", "reset-password" ] } }, "status": "Too Many Requests", "code": 429, "_postman_previewlanguage": "text", "header": [], "cookie": [], "body": "" } ] } ] }, { "name": "book-demo", "item": [ { "name": "Book a demo", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"full_name\": \"string\",\n \"email\": \"2jISXOcc-CSf@lYLQA.qfxa\",\n \"employees\": \"50-100\",\n \"looking_for\": [\n \"Compliance Automation\"\n ],\n \"hear_about_us\": \"string\",\n \"compliances\": [\n \"SOC 2\"\n ]\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/book-demo", "host": [ "{{baseUrl}}" ], "path": [ "api", "book-demo" ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"full_name\": \"string\",\n \"email\": \"2jISXOcc-CSf@lYLQA.qfxa\",\n \"employees\": \"50-100\",\n \"looking_for\": [\n \"Compliance Automation\"\n ],\n \"hear_about_us\": \"string\",\n \"compliances\": [\n \"SOC 2\"\n ]\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/book-demo", "host": [ "{{baseUrl}}" ], "path": [ "api", "book-demo" ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" }, { "name": "Validation failed", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"full_name\": \"string\",\n \"email\": \"2jISXOcc-CSf@lYLQA.qfxa\",\n \"employees\": \"50-100\",\n \"looking_for\": [\n \"Compliance Automation\"\n ],\n \"hear_about_us\": \"string\",\n \"compliances\": [\n \"SOC 2\"\n ]\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/book-demo", "host": [ "{{baseUrl}}" ], "path": [ "api", "book-demo" ] } }, "status": "Unprocessable Entity (WebDAV) (RFC 4918)", "code": 422, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": false,\n \"message\": \"string\",\n \"errors\": {\n \"key_0\": 810,\n \"key_1\": \"string\"\n }\n}" } ] } ] }, { "name": "logout", "item": [ { "name": "Logout (revoke token)", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "POST", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/logout", "host": [ "{{baseUrl}}" ], "path": [ "api", "logout" ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/logout", "host": [ "{{baseUrl}}" ], "path": [ "api", "logout" ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] } ] }, { "name": "me", "item": [ { "name": "Current user", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "GET", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/me", "host": [ "{{baseUrl}}" ], "path": [ "api", "me" ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/me", "host": [ "{{baseUrl}}" ], "path": [ "api", "me" ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] } ] }, { "name": "settings", "item": [ { "name": "menu", "item": [ { "name": "Settings sidebar menu (excludes third-party config)", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "GET", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/settings/menu", "host": [ "{{baseUrl}}" ], "path": [ "api", "settings", "menu" ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/settings/menu", "host": [ "{{baseUrl}}" ], "path": [ "api", "settings", "menu" ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] } ] } ] }, { "name": "login-permission-flow", "item": [ { "name": "Login & permission flow info", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "GET", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/login-permission-flow", "host": [ "{{baseUrl}}" ], "path": [ "api", "login-permission-flow" ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/login-permission-flow", "host": [ "{{baseUrl}}" ], "path": [ "api", "login-permission-flow" ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] } ] }, { "name": "profile", "item": [ { "name": "Get profile", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "GET", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/profile", "host": [ "{{baseUrl}}" ], "path": [ "api", "profile" ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/profile", "host": [ "{{baseUrl}}" ], "path": [ "api", "profile" ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] }, { "name": "Update profile", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"first_name\": \"string\",\n \"email\": \"s-0XDU-hz4Xb@emJZVsvZZgKBIBvhNQRUziXcE.cmwb\",\n \"last_name\": \"string\",\n \"phone\": \"string\",\n \"designation\": \"string\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/profile", "host": [ "{{baseUrl}}" ], "path": [ "api", "profile" ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"first_name\": \"string\",\n \"email\": \"s-0XDU-hz4Xb@emJZVsvZZgKBIBvhNQRUziXcE.cmwb\",\n \"last_name\": \"string\",\n \"phone\": \"string\",\n \"designation\": \"string\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/profile", "host": [ "{{baseUrl}}" ], "path": [ "api", "profile" ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] }, { "name": "Update profile (POST alias for mobile clients)", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"first_name\": \"string\",\n \"email\": \"s-0XDU-hz4Xb@emJZVsvZZgKBIBvhNQRUziXcE.cmwb\",\n \"last_name\": \"string\",\n \"phone\": \"string\",\n \"designation\": \"string\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/profile", "host": [ "{{baseUrl}}" ], "path": [ "api", "profile" ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"first_name\": \"string\",\n \"email\": \"s-0XDU-hz4Xb@emJZVsvZZgKBIBvhNQRUziXcE.cmwb\",\n \"last_name\": \"string\",\n \"phone\": \"string\",\n \"designation\": \"string\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/profile", "host": [ "{{baseUrl}}" ], "path": [ "api", "profile" ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] } ] }, { "name": "organizations", "item": [ { "name": "{id}", "item": [ { "name": "Get organization", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "GET", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/organizations/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "organizations", ":id" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/organizations/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "organizations", ":id" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" }, { "name": "Not found", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/organizations/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "organizations", ":id" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "status": "Not Found", "code": 404, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": false,\n \"message\": \"string\",\n \"errors\": {\n \"key_0\": 810,\n \"key_1\": \"string\"\n }\n}" } ] }, { "name": "Update organization", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"name\": \"string\",\n \"status\": \"inactive\",\n \"domain\": \"string\",\n \"industry\": \"string\",\n \"employee_count\": 1818,\n \"country\": \"string\",\n \"state\": \"string\",\n \"city\": \"string\",\n \"address\": \"string\",\n \"annual_revenue\": \"1000000\",\n \"fiscal_year_end\": \"December\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/organizations/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "organizations", ":id" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"name\": \"string\",\n \"status\": \"inactive\",\n \"domain\": \"string\",\n \"industry\": \"string\",\n \"employee_count\": 1818,\n \"country\": \"string\",\n \"state\": \"string\",\n \"city\": \"string\",\n \"address\": \"string\",\n \"annual_revenue\": \"1000000\",\n \"fiscal_year_end\": \"December\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/organizations/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "organizations", ":id" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] }, { "name": "Update organization (POST alias)", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"name\": \"string\",\n \"status\": \"inactive\",\n \"domain\": \"string\",\n \"industry\": \"string\",\n \"employee_count\": 1818,\n \"country\": \"string\",\n \"state\": \"string\",\n \"city\": \"string\",\n \"address\": \"string\",\n \"annual_revenue\": \"1000000\",\n \"fiscal_year_end\": \"December\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/organizations/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "organizations", ":id" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"name\": \"string\",\n \"status\": \"inactive\",\n \"domain\": \"string\",\n \"industry\": \"string\",\n \"employee_count\": 1818,\n \"country\": \"string\",\n \"state\": \"string\",\n \"city\": \"string\",\n \"address\": \"string\",\n \"annual_revenue\": \"1000000\",\n \"fiscal_year_end\": \"December\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/organizations/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "organizations", ":id" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] }, { "name": "Delete organization", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "DELETE", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/organizations/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "organizations", ":id" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "DELETE", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/organizations/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "organizations", ":id" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] } ] }, { "name": "List organizations", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "GET", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/organizations?q=string", "host": [ "{{baseUrl}}" ], "path": [ "api", "organizations" ], "query": [ { "key": "q", "value": "string" } ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/organizations?q=string", "host": [ "{{baseUrl}}" ], "path": [ "api", "organizations" ], "query": [ { "key": "q", "value": "string" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] }, { "name": "Create organization", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"name\": \"string\",\n \"status\": \"inactive\",\n \"domain\": \"string\",\n \"industry\": \"string\",\n \"employee_count\": 1818,\n \"country\": \"string\",\n \"state\": \"string\",\n \"city\": \"string\",\n \"address\": \"string\",\n \"annual_revenue\": \"1000000\",\n \"fiscal_year_end\": \"December\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/organizations", "host": [ "{{baseUrl}}" ], "path": [ "api", "organizations" ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"name\": \"string\",\n \"status\": \"inactive\",\n \"domain\": \"string\",\n \"industry\": \"string\",\n \"employee_count\": 1818,\n \"country\": \"string\",\n \"state\": \"string\",\n \"city\": \"string\",\n \"address\": \"string\",\n \"annual_revenue\": \"1000000\",\n \"fiscal_year_end\": \"December\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/organizations", "host": [ "{{baseUrl}}" ], "path": [ "api", "organizations" ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] } ] }, { "name": "users", "item": [ { "name": "employee-options", "item": [ { "name": "Employees available for user assignment", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "GET", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/users/employee-options?exclude_user_id=3727", "host": [ "{{baseUrl}}" ], "path": [ "api", "users", "employee-options" ], "query": [ { "key": "exclude_user_id", "value": "3727" } ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/users/employee-options?exclude_user_id=3727", "host": [ "{{baseUrl}}" ], "path": [ "api", "users", "employee-options" ], "query": [ { "key": "exclude_user_id", "value": "3727" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] } ] }, { "name": "{id}", "item": [ { "name": "Get user", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "GET", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/users/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "users", ":id" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/users/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "users", ":id" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] }, { "name": "Update user", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"employee_id\": 1473,\n \"password\": \"string\",\n \"password_confirm\": \"string\",\n \"status\": 0\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/users/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "users", ":id" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"employee_id\": 1473,\n \"password\": \"string\",\n \"password_confirm\": \"string\",\n \"status\": 0\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/users/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "users", ":id" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] }, { "name": "Update user (POST alias)", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"employee_id\": 1473,\n \"password\": \"string\",\n \"password_confirm\": \"string\",\n \"status\": 0\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/users/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "users", ":id" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"employee_id\": 1473,\n \"password\": \"string\",\n \"password_confirm\": \"string\",\n \"status\": 0\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/users/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "users", ":id" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] }, { "name": "Delete user", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "DELETE", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/users/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "users", ":id" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "DELETE", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/users/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "users", ":id" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] } ] }, { "name": "List users", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "GET", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/users?q=string", "host": [ "{{baseUrl}}" ], "path": [ "api", "users" ], "query": [ { "key": "q", "value": "string" } ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/users?q=string", "host": [ "{{baseUrl}}" ], "path": [ "api", "users" ], "query": [ { "key": "q", "value": "string" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] }, { "name": "Create user", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"employee_id\": 156,\n \"password\": \"string\",\n \"password_confirm\": \"string\",\n \"status\": 1\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/users", "host": [ "{{baseUrl}}" ], "path": [ "api", "users" ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"employee_id\": 156,\n \"password\": \"string\",\n \"password_confirm\": \"string\",\n \"status\": 1\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/users", "host": [ "{{baseUrl}}" ], "path": [ "api", "users" ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] } ] }, { "name": "departments", "item": [ { "name": "{id}", "item": [ { "name": "Get department", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "GET", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/departments/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "departments", ":id" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/departments/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "departments", ":id" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] }, { "name": "Update department", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"organization_id\": 1515,\n \"name\": \"string\",\n \"description\": \"string\",\n \"status\": \"string\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/departments/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "departments", ":id" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"organization_id\": 1515,\n \"name\": \"string\",\n \"description\": \"string\",\n \"status\": \"string\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/departments/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "departments", ":id" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] }, { "name": "Update department (POST alias)", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"organization_id\": 1515,\n \"name\": \"string\",\n \"description\": \"string\",\n \"status\": \"string\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/departments/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "departments", ":id" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"organization_id\": 1515,\n \"name\": \"string\",\n \"description\": \"string\",\n \"status\": \"string\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/departments/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "departments", ":id" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] }, { "name": "Delete department", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "DELETE", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/departments/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "departments", ":id" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "DELETE", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/departments/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "departments", ":id" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] } ] }, { "name": "List departments", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "GET", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/departments", "host": [ "{{baseUrl}}" ], "path": [ "api", "departments" ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/departments", "host": [ "{{baseUrl}}" ], "path": [ "api", "departments" ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] }, { "name": "Create department", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"organization_id\": 1515,\n \"name\": \"string\",\n \"description\": \"string\",\n \"status\": \"string\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/departments", "host": [ "{{baseUrl}}" ], "path": [ "api", "departments" ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"organization_id\": 1515,\n \"name\": \"string\",\n \"description\": \"string\",\n \"status\": \"string\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/departments", "host": [ "{{baseUrl}}" ], "path": [ "api", "departments" ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] } ] }, { "name": "employees", "item": [ { "name": "{id}", "item": [ { "name": "Get employee", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "GET", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/employees/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "employees", ":id" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/employees/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "employees", ":id" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] }, { "name": "Update employee", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"organization_id\": 2126,\n \"department_id\": 3970,\n \"employee_code\": \"string\",\n \"full_name\": \"string\",\n \"designation\": \"string\",\n \"email\": \"string\",\n \"phone\": \"string\",\n \"joining_date\": \"1954-03-28\",\n \"status\": \"string\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/employees/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "employees", ":id" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"organization_id\": 2126,\n \"department_id\": 3970,\n \"employee_code\": \"string\",\n \"full_name\": \"string\",\n \"designation\": \"string\",\n \"email\": \"string\",\n \"phone\": \"string\",\n \"joining_date\": \"1954-03-28\",\n \"status\": \"string\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/employees/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "employees", ":id" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] }, { "name": "Update employee (POST alias)", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"organization_id\": 2126,\n \"department_id\": 3970,\n \"employee_code\": \"string\",\n \"full_name\": \"string\",\n \"designation\": \"string\",\n \"email\": \"string\",\n \"phone\": \"string\",\n \"joining_date\": \"1954-03-28\",\n \"status\": \"string\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/employees/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "employees", ":id" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"organization_id\": 2126,\n \"department_id\": 3970,\n \"employee_code\": \"string\",\n \"full_name\": \"string\",\n \"designation\": \"string\",\n \"email\": \"string\",\n \"phone\": \"string\",\n \"joining_date\": \"1954-03-28\",\n \"status\": \"string\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/employees/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "employees", ":id" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] }, { "name": "Delete employee", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "DELETE", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/employees/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "employees", ":id" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "DELETE", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/employees/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "employees", ":id" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] } ] }, { "name": "List employees", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "GET", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/employees", "host": [ "{{baseUrl}}" ], "path": [ "api", "employees" ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/employees", "host": [ "{{baseUrl}}" ], "path": [ "api", "employees" ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] }, { "name": "Create employee", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"organization_id\": 2126,\n \"department_id\": 3970,\n \"employee_code\": \"string\",\n \"full_name\": \"string\",\n \"designation\": \"string\",\n \"email\": \"string\",\n \"phone\": \"string\",\n \"joining_date\": \"1954-03-28\",\n \"status\": \"string\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/employees", "host": [ "{{baseUrl}}" ], "path": [ "api", "employees" ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"organization_id\": 2126,\n \"department_id\": 3970,\n \"employee_code\": \"string\",\n \"full_name\": \"string\",\n \"designation\": \"string\",\n \"email\": \"string\",\n \"phone\": \"string\",\n \"joining_date\": \"1954-03-28\",\n \"status\": \"string\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/employees", "host": [ "{{baseUrl}}" ], "path": [ "api", "employees" ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] }, { "name": "employees bulk upload", "request": { "auth": { "type": "noauth" }, "method": "POST", "header": [], "body": { "mode": "formdata", "formdata": [ { "key": "employee_file", "type": "file", "uuid": "96f2c8a4-ad04-470f-9b39-2424714c9430", "value": null } ] }, "url": { "raw": "{{baseUrl}}/api/employees/bulk-upload", "host": [ "{{baseUrl}}" ], "path": [ "api", "employees", "bulk-upload" ] } }, "response": [] } ] }, { "name": "modules", "item": [ { "name": "{id}", "item": [ { "name": "Get module", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "GET", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/modules/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "modules", ":id" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/modules/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "modules", ":id" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] }, { "name": "Update module", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "PUT", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/modules/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "modules", ":id" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "PUT", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/modules/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "modules", ":id" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] }, { "name": "Delete module", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "DELETE", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/modules/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "modules", ":id" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "DELETE", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/modules/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "modules", ":id" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] }, { "name": "Update module (POST alias)", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "POST", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/modules/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "modules", ":id" ], "variable": [ { "key": "id", "value": "1" } ] }, "description": "POST alias for the corresponding PUT endpoint." }, "response": [] } ] }, { "name": "List modules (grouped)", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "GET", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/modules", "host": [ "{{baseUrl}}" ], "path": [ "api", "modules" ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/modules", "host": [ "{{baseUrl}}" ], "path": [ "api", "modules" ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] }, { "name": "Create module", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "POST", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/modules", "host": [ "{{baseUrl}}" ], "path": [ "api", "modules" ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/modules", "host": [ "{{baseUrl}}" ], "path": [ "api", "modules" ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] } ] }, { "name": "roles", "item": [ { "name": "{id}", "item": [ { "name": "Get role", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "GET", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/roles/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "roles", ":id" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/roles/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "roles", ":id" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] }, { "name": "Update role", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "PUT", "header": [ { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\r\n \"role\": \"manager\",\r\n \"status\": 1,\r\n \"description\": \"\"\r\n}", "options": { "raw": { "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/roles/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "roles", ":id" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "PUT", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/roles/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "roles", ":id" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] }, { "name": "Delete role", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "DELETE", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/roles/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "roles", ":id" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "DELETE", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/roles/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "roles", ":id" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] }, { "name": "Update role (POST alias)", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "POST", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/roles/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "roles", ":id" ], "variable": [ { "key": "id", "value": "1" } ] }, "description": "POST alias for the corresponding PUT endpoint." }, "response": [] } ] }, { "name": "List roles", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "GET", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/roles", "host": [ "{{baseUrl}}" ], "path": [ "api", "roles" ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/roles", "host": [ "{{baseUrl}}" ], "path": [ "api", "roles" ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] }, { "name": "Create role", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "POST", "header": [ { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\r\n \"role\": \"manager\",\r\n \"code\": \"manager\",\r\n \"level\": 2,\r\n \"status\": 1,\r\n \"description\": \"\"\r\n}", "options": { "raw": { "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/roles", "host": [ "{{baseUrl}}" ], "path": [ "api", "roles" ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/roles", "host": [ "{{baseUrl}}" ], "path": [ "api", "roles" ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] } ] }, { "name": "user-role-mappings", "item": [ { "name": "{id}", "item": [ { "name": "Get mapping", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "GET", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/user-role-mappings/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "user-role-mappings", ":id" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/user-role-mappings/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "user-role-mappings", ":id" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] }, { "name": "Update mapping", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "PUT", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/user-role-mappings/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "user-role-mappings", ":id" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "PUT", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/user-role-mappings/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "user-role-mappings", ":id" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] }, { "name": "Delete mapping", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "DELETE", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/user-role-mappings/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "user-role-mappings", ":id" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "DELETE", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/user-role-mappings/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "user-role-mappings", ":id" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] }, { "name": "Update user-role mapping (POST alias)", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "POST", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/user-role-mappings/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "user-role-mappings", ":id" ], "variable": [ { "key": "id", "value": "1" } ] }, "description": "POST alias for the corresponding PUT endpoint." }, "response": [] } ] }, { "name": "List user-role mappings", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "GET", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/user-role-mappings", "host": [ "{{baseUrl}}" ], "path": [ "api", "user-role-mappings" ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/user-role-mappings", "host": [ "{{baseUrl}}" ], "path": [ "api", "user-role-mappings" ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] }, { "name": "Create mapping", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "POST", "header": [ { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\r\n \"roles\": [1],\r\n \"effective_date\": \"2026-07-30\",\r\n \"user_id\": 1\r\n}", "options": { "raw": { "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/user-role-mappings", "host": [ "{{baseUrl}}" ], "path": [ "api", "user-role-mappings" ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/user-role-mappings", "host": [ "{{baseUrl}}" ], "path": [ "api", "user-role-mappings" ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] } ] }, { "name": "role-module-permissions", "item": [ { "name": "{roleId}", "item": [ { "name": "Matrix for specific role", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "GET", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/role-module-permissions/:roleId", "host": [ "{{baseUrl}}" ], "path": [ "api", "role-module-permissions", ":roleId" ], "variable": [ { "key": "roleId", "value": "3727" } ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/role-module-permissions/:roleId", "host": [ "{{baseUrl}}" ], "path": [ "api", "role-module-permissions", ":roleId" ], "variable": [ { "key": "roleId", "value": "3727" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] } ] }, { "name": "Permission matrix for role", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "GET", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/role-module-permissions?role_id=3727", "host": [ "{{baseUrl}}" ], "path": [ "api", "role-module-permissions" ], "query": [ { "key": "role_id", "value": "3727" } ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/role-module-permissions?role_id=3727", "host": [ "{{baseUrl}}" ], "path": [ "api", "role-module-permissions" ], "query": [ { "key": "role_id", "value": "3727" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] }, { "name": "Save permission matrix", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"role_id\": 4472,\n \"permissions\": {\n \"key_0\": \"string\",\n \"key_1\": \"string\",\n \"key_2\": 1599,\n \"key_3\": true\n }\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/role-module-permissions", "host": [ "{{baseUrl}}" ], "path": [ "api", "role-module-permissions" ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"role_id\": 4472,\n \"permissions\": {\n \"key_0\": \"string\",\n \"key_1\": \"string\",\n \"key_2\": 1599,\n \"key_3\": true\n }\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/role-module-permissions", "host": [ "{{baseUrl}}" ], "path": [ "api", "role-module-permissions" ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] } ] }, { "name": "control-owners", "item": [ { "name": "users-by-role", "item": [ { "name": "{roleId}", "item": [ { "name": "Users with a given role", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "GET", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/control-owners/users-by-role/:roleId", "host": [ "{{baseUrl}}" ], "path": [ "api", "control-owners", "users-by-role", ":roleId" ], "variable": [ { "key": "roleId", "value": "3727" } ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/control-owners/users-by-role/:roleId", "host": [ "{{baseUrl}}" ], "path": [ "api", "control-owners", "users-by-role", ":roleId" ], "variable": [ { "key": "roleId", "value": "3727" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] } ] } ] }, { "name": "{moduleId}", "item": [ { "name": "Update control owner assignment", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/control-owners/:moduleId", "host": [ "{{baseUrl}}" ], "path": [ "api", "control-owners", ":moduleId" ], "variable": [ { "key": "moduleId", "value": "12", "description": "Existing assigned module id" } ] }, "description": "Path id is the existing assigned module. Body module_id may change the target module.", "body": { "mode": "raw", "raw": "{\r\n \"module_id\": 12,\r\n \"department_id\": 1,\r\n \"primary_role_id\": 2,\r\n \"primary_owner_user_id\": 5,\r\n \"secondary_role_id\": 3,\r\n \"secondary_owner_user_id\": 6,\r\n \"approved_by\": 10,\r\n \"is_approved\": 0\r\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "response": [ { "name": "Success", "originalRequest": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/control-owners/:moduleId", "host": [ "{{baseUrl}}" ], "path": [ "api", "control-owners", ":moduleId" ], "variable": [ { "key": "moduleId", "value": "12", "description": "Existing assigned module id" } ] }, "body": { "mode": "raw", "raw": "{\r\n \"module_id\": 12,\r\n \"department_id\": 1,\r\n \"primary_role_id\": 2,\r\n \"primary_owner_user_id\": 5,\r\n \"secondary_role_id\": 3,\r\n \"secondary_owner_user_id\": 6,\r\n \"approved_by\": 10,\r\n \"is_approved\": 0\r\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] }, { "name": "Remove control owner", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "DELETE", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/control-owners/:moduleId", "host": [ "{{baseUrl}}" ], "path": [ "api", "control-owners", ":moduleId" ], "variable": [ { "key": "moduleId", "value": "3727" } ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "DELETE", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/control-owners/:moduleId", "host": [ "{{baseUrl}}" ], "path": [ "api", "control-owners", ":moduleId" ], "variable": [ { "key": "moduleId", "value": "3727" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] }, { "name": "Update control owner assignment (POST alias)", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/control-owners/:moduleId", "host": [ "{{baseUrl}}" ], "path": [ "api", "control-owners", ":moduleId" ], "variable": [ { "key": "moduleId", "value": "12", "description": "Existing assigned module id" } ] }, "description": "Same as PUT updateControlOwner \u2014 POST alias for clients that cannot send PUT.", "body": { "mode": "raw", "raw": "{\r\n \"module_id\": 12,\r\n \"department_id\": 1,\r\n \"primary_role_id\": 2,\r\n \"primary_owner_user_id\": 5,\r\n \"secondary_role_id\": 3,\r\n \"secondary_owner_user_id\": 6,\r\n \"approved_by\": 10,\r\n \"is_approved\": 0\r\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "response": [ { "name": "Success", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/control-owners/:moduleId", "host": [ "{{baseUrl}}" ], "path": [ "api", "control-owners", ":moduleId" ], "variable": [ { "key": "moduleId", "value": "12", "description": "Existing assigned module id" } ] }, "body": { "mode": "raw", "raw": "{\r\n \"module_id\": 12,\r\n \"department_id\": 1,\r\n \"primary_role_id\": 2,\r\n \"primary_owner_user_id\": 5,\r\n \"secondary_role_id\": 3,\r\n \"secondary_owner_user_id\": 6,\r\n \"approved_by\": 10,\r\n \"is_approved\": 0\r\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] } ] }, { "name": "List control owners", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "GET", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/control-owners", "host": [ "{{baseUrl}}" ], "path": [ "api", "control-owners" ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/control-owners", "host": [ "{{baseUrl}}" ], "path": [ "api", "control-owners" ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] }, { "name": "Add control owner assignment", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "POST", "header": [ { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\r\n \"module_id\": 1,\r\n \"department_id\": 1,\r\n \"primary_role_id\": \"\",\r\n \"primary_owner_user_id\": \"\",\r\n \"secondary_role_id\": \"\",\r\n \"secondary_owner_user_id\": \"\",\r\n \"approved_by\": \"\"\r\n}", "options": { "raw": { "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/control-owners", "host": [ "{{baseUrl}}" ], "path": [ "api", "control-owners" ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/control-owners", "host": [ "{{baseUrl}}" ], "path": [ "api", "control-owners" ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] } ] }, { "name": "controls-settings", "item": [ { "name": "{moduleId}", "item": [ { "name": "Get setting for module", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "GET", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/controls-settings/:moduleId", "host": [ "{{baseUrl}}" ], "path": [ "api", "controls-settings", ":moduleId" ], "variable": [ { "key": "moduleId", "value": "3727" } ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/controls-settings/:moduleId", "host": [ "{{baseUrl}}" ], "path": [ "api", "controls-settings", ":moduleId" ], "variable": [ { "key": "moduleId", "value": "3727" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] } ] }, { "name": "List controls settings", "protocolProfileBehavior": { "disableBodyPruning": true }, "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "GET", "header": [ { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "", "options": { "raw": { "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/controls-settings", "host": [ "{{baseUrl}}" ], "path": [ "api", "controls-settings" ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/controls-settings", "host": [ "{{baseUrl}}" ], "path": [ "api", "controls-settings" ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] }, { "name": "Save control setting", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"module_id\": 3453,\n \"audit_frequency_id\": 5337,\n \"evidence\": \"string\",\n \"validation_rules\": \"string\",\n \"status\": \"inactive\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/controls-settings", "host": [ "{{baseUrl}}" ], "path": [ "api", "controls-settings" ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"module_id\": 3453,\n \"audit_frequency_id\": 5337,\n \"evidence\": \"string\",\n \"validation_rules\": \"string\",\n \"status\": \"inactive\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/controls-settings", "host": [ "{{baseUrl}}" ], "path": [ "api", "controls-settings" ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] }, { "name": "toggle enable", "request": { "auth": { "type": "noauth" }, "method": "POST", "header": [], "body": { "mode": "raw", "raw": "{\r\n \"convention_id\": 65,\r\n \"enabled\": false\r\n}", "options": { "raw": { "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/controls-settings/toggle-enable", "host": [ "{{baseUrl}}" ], "path": [ "api", "controls-settings", "toggle-enable" ] } }, "response": [] }, { "name": "{organizationId}", "item": [ { "name": "{moduleId}", "item": [ { "name": "Get controls setting by organization + module", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "GET", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/controls-settings/:organizationId/:moduleId", "host": [ "{{baseUrl}}" ], "path": [ "api", "controls-settings", ":organizationId", ":moduleId" ], "variable": [ { "key": "organizationId", "value": "1" }, { "key": "moduleId", "value": "12" } ] }, "description": "GET /api/controls-settings/{organizationId}/{moduleId}" }, "response": [] } ] } ] } ] }, { "name": "tasks", "item": [ { "name": "{id}", "item": [ { "name": "status", "item": [ { "name": "Update task status", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"status\": \"string\" // 'in_progress','submitted','rework','closed'\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/tasks/:id/status", "host": [ "{{baseUrl}}" ], "path": [ "api", "tasks", ":id", "status" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"status\": \"string\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/tasks/:id/status", "host": [ "{{baseUrl}}" ], "path": [ "api", "tasks", ":id", "status" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] } ] }, { "name": "comments", "item": [ { "name": "Add task comment", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"comment\": \"string\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/tasks/:id/comments", "host": [ "{{baseUrl}}" ], "path": [ "api", "tasks", ":id", "comments" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"comment\": \"string\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/tasks/:id/comments", "host": [ "{{baseUrl}}" ], "path": [ "api", "tasks", ":id", "comments" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] }, { "name": "delete comment", "request": { "method": "DELETE", "header": [], "url": { "raw": "{{baseUrl}}/api/tasks/:id/comments/:commentid/delete", "host": [ "{{baseUrl}}" ], "path": [ "api", "tasks", ":id", "comments", ":commentid", "delete" ], "variable": [ { "key": "id", "value": "12" }, { "key": "commentid", "value": "1" } ] } }, "response": [] }, { "name": "{commentId}", "item": [ { "name": "Delete task comment", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "DELETE", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/tasks/:id/comments/:commentId", "host": [ "{{baseUrl}}" ], "path": [ "api", "tasks", ":id", "comments", ":commentId" ], "variable": [ { "key": "id", "value": "1" }, { "key": "commentId", "value": "1" } ] }, "description": "Correct route: DELETE /api/tasks/{id}/comments/{commentId}" }, "response": [] } ] } ] }, { "name": "Get task with comments", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "GET", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/tasks/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "tasks", ":id" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/tasks/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "tasks", ":id" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] }, { "name": "Update task", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "PUT", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/tasks/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "tasks", ":id" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "PUT", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/tasks/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "tasks", ":id" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] }, { "name": "Reassign task", "request": { "method": "POST", "header": [], "body": { "mode": "raw", "raw": "{\r\n \"assigned_user_id\": 9\r\n}", "options": { "raw": { "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/tasks/:id/reassign", "host": [ "{{baseUrl}}" ], "path": [ "api", "tasks", ":id", "reassign" ], "variable": [ { "key": "id", "value": "" } ] } }, "response": [] }, { "name": "delete task", "request": { "method": "DELETE", "header": [], "url": { "raw": "{{baseUrl}}/api/tasks/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "tasks", ":id" ], "variable": [ { "key": "id", "value": "" } ] } }, "response": [] }, { "name": "task attachments", "request": { "method": "GET", "header": [], "url": { "raw": "{{baseUrl}}/api/tasks/:id/attachments", "host": [ "{{baseUrl}}" ], "path": [ "api", "tasks", ":id", "attachments" ], "variable": [ { "key": "id", "value": "" } ] } }, "response": [] }, { "name": "Upload attachments", "request": { "method": "POST", "header": [], "body": { "mode": "formdata", "formdata": [ { "key": "attachments[]", "type": "file", "uuid": "5ed83272-6d95-4ffc-81fb-da1cf591eada", "value": null } ] }, "url": { "raw": "{{baseUrl}}/api/tasks/:id/attachments", "host": [ "{{baseUrl}}" ], "path": [ "api", "tasks", ":id", "attachments" ], "variable": [ { "key": "id", "value": "" } ] } }, "response": [] }, { "name": "Submit task", "request": { "method": "POST", "header": [], "url": { "raw": "{{baseUrl}}/api/tasks/:id/submit", "host": [ "{{baseUrl}}" ], "path": [ "api", "tasks", ":id", "submit" ], "variable": [ { "key": "id", "value": "" } ] } }, "response": [] }, { "name": "delete", "item": [ { "name": "Delete task (POST alias)", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "POST", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/tasks/:id/delete", "host": [ "{{baseUrl}}" ], "path": [ "api", "tasks", ":id", "delete" ], "variable": [ { "key": "id", "value": "1" } ] }, "description": "POST alias for DELETE /api/tasks/{id}." }, "response": [ { "name": "Success", "originalRequest": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/tasks/:id/delete", "host": [ "{{baseUrl}}" ], "path": [ "api", "tasks", ":id", "delete" ], "variable": [ { "key": "id", "value": "1" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] } ] }, { "name": "Update task (POST alias)", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "POST", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/tasks/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "tasks", ":id" ], "variable": [ { "key": "id", "value": "1" } ] }, "description": "POST alias for PUT /api/tasks/{id}." }, "response": [] } ] }, { "name": "List tasks", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "GET", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/tasks", "host": [ "{{baseUrl}}" ], "path": [ "api", "tasks" ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/tasks", "host": [ "{{baseUrl}}" ], "path": [ "api", "tasks" ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] }, { "name": "Create task", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "POST", "header": [ { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\r\n \"module_id\": 35,\r\n \"control_code\": \"CC1.1\",\r\n \"convention_id\": 1,\r\n \"title\": \"task title\",\r\n \"description\": \"task description\",\r\n \"priority\": \"medium\", //('low', 'medium', 'high')\r\n \"assigned_user_id\": 9,\r\n \"due_date\": \"2026-07-30\"\r\n}", "options": { "raw": { "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/tasks", "host": [ "{{baseUrl}}" ], "path": [ "api", "tasks" ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/tasks", "host": [ "{{baseUrl}}" ], "path": [ "api", "tasks" ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] }, { "name": "task list by convention id", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "GET", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/atst/1/tasks", "host": [ "{{baseUrl}}" ], "path": [ "api", "atst", "1", "tasks" ] } }, "response": [] } ] }, { "name": "policies", "item": [ { "name": "{id}", "item": [ { "name": "Get policy with sections", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "GET", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/policies/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "policies", ":id" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/policies/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "policies", ":id" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] }, { "name": "Update policy metadata", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "PUT", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/policies/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "policies", ":id" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "PUT", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/policies/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "policies", ":id" ], "variable": [ { "key": "id", "value": "3727" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] }, { "name": "Update policy metadata (POST alias)", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "POST", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/policies/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "policies", ":id" ], "variable": [ { "key": "id", "value": "1" } ] }, "description": "POST alias for the corresponding PUT endpoint." }, "response": [] } ] }, { "name": "create-options", "item": [ { "name": "Form options for creating a policy", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "GET", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/policies/create-options", "host": [ "{{baseUrl}}" ], "path": [ "api", "policies", "create-options" ] }, "description": "Document types (incl. Other + N/A) and related control modules for the create form." }, "response": [ { "name": "Success", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/policies/create-options", "host": [ "{{baseUrl}}" ], "path": [ "api", "policies", "create-options" ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] } ] }, { "name": "upload", "item": [ { "name": "Upload / import an existing policy (PDF or DOCX)", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "POST", "header": [ { "key": "Accept", "value": "application/json" } ], "body": { "mode": "formdata", "formdata": [ { "key": "policy_file", "type": "file", "src": [] }, { "key": "document_type", "value": "code_of_conduct_doc", "type": "text" }, { "key": "document_type_other", "value": "", "type": "text", "description": "Required when document_type=other" }, { "key": "title", "value": "Code of Conduct", "type": "text" }, { "key": "effective_date", "value": "2026-07-01", "type": "text" }, { "key": "related_modules[]", "value": "12", "type": "text" }, { "key": "related_modules[]", "value": "15", "type": "text" } ] }, "url": { "raw": "{{baseUrl}}/api/policies/upload", "host": [ "{{baseUrl}}" ], "path": [ "api", "policies", "upload" ] }, "description": "Import existing PDF/DOCX. For Other use document_type=other + document_type_other. For N/A omit file and send related modules." }, "response": [ { "name": "Success", "originalRequest": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/policies/upload", "host": [ "{{baseUrl}}" ], "path": [ "api", "policies", "upload" ] }, "body": { "mode": "formdata", "formdata": [ { "key": "policy_file", "type": "file", "src": [] }, { "key": "document_type", "value": "code_of_conduct_doc", "type": "text" }, { "key": "document_type_other", "value": "", "type": "text", "description": "Required when document_type=other" }, { "key": "title", "value": "Code of Conduct", "type": "text" }, { "key": "effective_date", "value": "2026-07-01", "type": "text" }, { "key": "related_modules[]", "value": "12", "type": "text" }, { "key": "related_modules[]", "value": "15", "type": "text" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] } ] }, { "name": "generate", "item": [ { "name": "Generate policy with AI", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"document_type\": \"information_security_doc\",\n \"title\": \"Information Security Policy\",\n \"industry_scope\": \"SaaS technology company providing B2B analytics platforms to enterprise customers worldwide.\",\n \"key_requirements\": \"Cover access control, encryption at rest and in transit, incident response, and annual policy review aligned to SOC 2.\",\n \"effective_date\": \"2026-07-01\",\n \"related_modules\": [12, 15]\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/policies/generate", "host": [ "{{baseUrl}}" ], "path": [ "api", "policies", "generate" ] }, "description": "AI draft. For custom type set document_type to other and document_type_other to the name. N/A is not allowed." }, "response": [ { "name": "Success", "originalRequest": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/policies/generate", "host": [ "{{baseUrl}}" ], "path": [ "api", "policies", "generate" ] }, "body": { "mode": "raw", "raw": "{\n \"document_type\": \"information_security_doc\",\n \"title\": \"Information Security Policy\",\n \"industry_scope\": \"SaaS technology company providing B2B analytics platforms to enterprise customers worldwide.\",\n \"key_requirements\": \"Cover access control, encryption at rest and in transit, incident response, and annual policy review aligned to SOC 2.\",\n \"effective_date\": \"2026-07-01\",\n \"related_modules\": [12, 15]\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] } ] }, { "name": "List policies for organization", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "GET", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/policies", "host": [ "{{baseUrl}}" ], "path": [ "api", "policies" ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/policies", "host": [ "{{baseUrl}}" ], "path": [ "api", "policies" ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] } ] }, { "name": "control-pages", "item": [ { "name": "catalog", "item": [ { "name": "SOC 2 control catalog with status and overview counts", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "GET", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/control-pages/catalog", "host": [ "{{baseUrl}}" ], "path": [ "api", "control-pages", "catalog" ] }, "description": "Returns catalog controls with per-control `status` (`complete` | `in_progress` | `not_started`),\n`evidence_count`, and an `overview` object with totals + `percent_complete`.\nNon-owners only see controls they can view.\n" }, "response": [ { "name": "Success", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/control-pages/catalog", "host": [ "{{baseUrl}}" ], "path": [ "api", "control-pages", "catalog" ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] } ] }, { "name": "{moduleCode}", "item": [ { "name": "policies", "item": [ { "name": "Linked policy documents", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "GET", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/control-pages/:moduleCode/policies", "host": [ "{{baseUrl}}" ], "path": [ "api", "control-pages", ":moduleCode", "policies" ], "variable": [ { "key": "moduleCode", "value": "code-of-conduct", "description": "Module route slug" } ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/control-pages/:moduleCode/policies", "host": [ "{{baseUrl}}" ], "path": [ "api", "control-pages", ":moduleCode", "policies" ], "variable": [ { "key": "moduleCode", "value": "code-of-conduct", "description": "Module route slug" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] } ] }, { "name": "atst-validation", "item": [ { "name": "Evidence Validated matrix (Policy + ATST rows with Pass/Fail)", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "GET", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/control-pages/:moduleCode/atst-validation", "host": [ "{{baseUrl}}" ], "path": [ "api", "control-pages", ":moduleCode", "atst-validation" ], "variable": [ { "key": "moduleCode", "value": "code-of-conduct", "description": "Module route slug" } ] }, "description": "Returns the same rows as the web Evidence Validated table:\n`atst_code`, `requirement`, `status` (PASS/FAIL), `can_mark_pass`, `can_mark_fail`, `convention_id`.\nUse `convention_id` with `/api/atst/{conventionId}` and mark-pass/mark-fail.\n" }, "response": [ { "name": "Success", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/control-pages/:moduleCode/atst-validation", "host": [ "{{baseUrl}}" ], "path": [ "api", "control-pages", ":moduleCode", "atst-validation" ], "variable": [ { "key": "moduleCode", "value": "code-of-conduct", "description": "Module route slug" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" }, { "name": "Not found", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/control-pages/:moduleCode/atst-validation", "host": [ "{{baseUrl}}" ], "path": [ "api", "control-pages", ":moduleCode", "atst-validation" ], "variable": [ { "key": "moduleCode", "value": "code-of-conduct", "description": "Module route slug" } ] } }, "status": "Not Found", "code": 404, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": false,\n \"message\": \"string\",\n \"errors\": {\n \"key_0\": 810,\n \"key_1\": \"string\"\n }\n}" } ] } ] }, { "name": "control-tasks", "item": [ { "name": "List internal control tasks for this control (e.g. CC1.1)", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "GET", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/control-pages/:moduleCode/control-tasks?scope=all&limit=50", "host": [ "{{baseUrl}}" ], "path": [ "api", "control-pages", ":moduleCode", "control-tasks" ], "query": [ { "key": "scope", "value": "all", "description": "`all` (default) = every task for this control including ATST-scoped; `control` = only tasks with no convention_id" }, { "key": "limit", "value": "50" } ], "variable": [ { "key": "moduleCode", "value": "code-of-conduct", "description": "Module route slug" } ] }, "description": "Also returns `policies` (by_control / unlinked / document_types) and `control_setting`\nfor the current organization + module.\n" }, "response": [ { "name": "Success", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/control-pages/:moduleCode/control-tasks?scope=all&limit=50", "host": [ "{{baseUrl}}" ], "path": [ "api", "control-pages", ":moduleCode", "control-tasks" ], "query": [ { "description": "`all` (default) = every task for this control including ATST-scoped; `control` = only tasks with no convention_id", "key": "scope", "value": "all" }, { "key": "limit", "value": "50" } ], "variable": [ { "key": "moduleCode", "value": "code-of-conduct", "description": "Module route slug" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] }, { "name": "Create a control-level task for this control", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"title\": \"string\",\n \"assigned_user_id\": 995,\n \"description\": \"string\",\n \"priority\": \"high\",\n \"due_date\": \"1968-02-12\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/control-pages/:moduleCode/control-tasks?scope=all&limit=50", "host": [ "{{baseUrl}}" ], "path": [ "api", "control-pages", ":moduleCode", "control-tasks" ], "query": [ { "key": "scope", "value": "all", "description": "`all` (default) = every task for this control including ATST-scoped; `control` = only tasks with no convention_id" }, { "key": "limit", "value": "50" } ], "variable": [ { "key": "moduleCode", "value": "code-of-conduct", "description": "Module route slug" } ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"title\": \"string\",\n \"assigned_user_id\": 995,\n \"description\": \"string\",\n \"priority\": \"high\",\n \"due_date\": \"1968-02-12\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/control-pages/:moduleCode/control-tasks?scope=all&limit=50", "host": [ "{{baseUrl}}" ], "path": [ "api", "control-pages", ":moduleCode", "control-tasks" ], "query": [ { "description": "`all` (default) = every task for this control including ATST-scoped; `control` = only tasks with no convention_id", "key": "scope", "value": "all" }, { "key": "limit", "value": "50" } ], "variable": [ { "key": "moduleCode", "value": "code-of-conduct", "description": "Module route slug" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] } ] }, { "name": "sync", "item": [ { "name": "google", "item": [ { "name": "Sync Google Drive / Workspace evidence", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"max_items\": 200\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/control-pages/:moduleCode/sync/google", "host": [ "{{baseUrl}}" ], "path": [ "api", "control-pages", ":moduleCode", "sync", "google" ], "variable": [ { "key": "moduleCode", "value": "code-of-conduct", "description": "Module route slug" } ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"max_items\": 200\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/control-pages/:moduleCode/sync/google", "host": [ "{{baseUrl}}" ], "path": [ "api", "control-pages", ":moduleCode", "sync", "google" ], "variable": [ { "key": "moduleCode", "value": "code-of-conduct", "description": "Module route slug" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" }, { "name": "Google consent required", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"max_items\": 200\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/control-pages/:moduleCode/sync/google", "host": [ "{{baseUrl}}" ], "path": [ "api", "control-pages", ":moduleCode", "sync", "google" ], "variable": [ { "key": "moduleCode", "value": "code-of-conduct", "description": "Module route slug" } ] } }, "status": "Forbidden", "code": 403, "_postman_previewlanguage": "text", "header": [], "cookie": [], "body": "" } ] } ] }, { "name": "confluence", "item": [ { "name": "Sync Confluence pages", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"search_query\": \"BCP\",\n \"max_pages\": 50\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/control-pages/:moduleCode/sync/confluence", "host": [ "{{baseUrl}}" ], "path": [ "api", "control-pages", ":moduleCode", "sync", "confluence" ], "variable": [ { "key": "moduleCode", "value": "code-of-conduct", "description": "Module route slug" } ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"search_query\": \"BCP\",\n \"max_pages\": 50\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/control-pages/:moduleCode/sync/confluence", "host": [ "{{baseUrl}}" ], "path": [ "api", "control-pages", ":moduleCode", "sync", "confluence" ], "variable": [ { "key": "moduleCode", "value": "code-of-conduct", "description": "Module route slug" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] } ] }, { "name": "gmail-inbox", "item": [ { "name": "Sync Gmail inbox for control", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"limit\": 100\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/control-pages/:moduleCode/sync/gmail-inbox", "host": [ "{{baseUrl}}" ], "path": [ "api", "control-pages", ":moduleCode", "sync", "gmail-inbox" ], "variable": [ { "key": "moduleCode", "value": "code-of-conduct", "description": "Module route slug" } ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"limit\": 100\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/control-pages/:moduleCode/sync/gmail-inbox", "host": [ "{{baseUrl}}" ], "path": [ "api", "control-pages", ":moduleCode", "sync", "gmail-inbox" ], "variable": [ { "key": "moduleCode", "value": "code-of-conduct", "description": "Module route slug" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] } ] }, { "name": "gmail-subject", "item": [ { "name": "Sync Gmail by subject query", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"subject_query\": \"string\",\n \"limit\": 50\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/control-pages/:moduleCode/sync/gmail-subject", "host": [ "{{baseUrl}}" ], "path": [ "api", "control-pages", ":moduleCode", "sync", "gmail-subject" ], "variable": [ { "key": "moduleCode", "value": "code-of-conduct", "description": "Module route slug" } ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"subject_query\": \"string\",\n \"limit\": 50\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/control-pages/:moduleCode/sync/gmail-subject", "host": [ "{{baseUrl}}" ], "path": [ "api", "control-pages", ":moduleCode", "sync", "gmail-subject" ], "variable": [ { "key": "moduleCode", "value": "code-of-conduct", "description": "Module route slug" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] } ] }, { "name": "jira-tickets", "item": [ { "name": "Sync Jira assigned tickets", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"target_email\": \"ZDg1@ssPVMKtDbrsVUaKJwGlReeFqLvfTy.epi\",\n \"max_results\": 100\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/control-pages/:moduleCode/sync/jira-tickets", "host": [ "{{baseUrl}}" ], "path": [ "api", "control-pages", ":moduleCode", "sync", "jira-tickets" ], "variable": [ { "key": "moduleCode", "value": "code-of-conduct", "description": "Module route slug" } ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"target_email\": \"ZDg1@ssPVMKtDbrsVUaKJwGlReeFqLvfTy.epi\",\n \"max_results\": 100\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/control-pages/:moduleCode/sync/jira-tickets", "host": [ "{{baseUrl}}" ], "path": [ "api", "control-pages", ":moduleCode", "sync", "jira-tickets" ], "variable": [ { "key": "moduleCode", "value": "code-of-conduct", "description": "Module route slug" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] } ] }, { "name": "jira-link", "item": [ { "name": "Sync single Jira ticket by link or key", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"jira_link\": \"https://company.atlassian.net/browse/AT-123\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/control-pages/:moduleCode/sync/jira-link", "host": [ "{{baseUrl}}" ], "path": [ "api", "control-pages", ":moduleCode", "sync", "jira-link" ], "variable": [ { "key": "moduleCode", "value": "code-of-conduct", "description": "Module route slug" } ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"jira_link\": \"https://company.atlassian.net/browse/AT-123\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/control-pages/:moduleCode/sync/jira-link", "host": [ "{{baseUrl}}" ], "path": [ "api", "control-pages", ":moduleCode", "sync", "jira-link" ], "variable": [ { "key": "moduleCode", "value": "code-of-conduct", "description": "Module route slug" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] } ] }, { "name": "sharepoint", "item": [ { "name": "Sync SharePoint documents for control", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "POST", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/control-pages/:moduleCode/sync/sharepoint", "host": [ "{{baseUrl}}" ], "path": [ "api", "control-pages", ":moduleCode", "sync", "sharepoint" ], "variable": [ { "key": "moduleCode", "value": "code-of-conduct", "description": "Module route slug" } ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/control-pages/:moduleCode/sync/sharepoint", "host": [ "{{baseUrl}}" ], "path": [ "api", "control-pages", ":moduleCode", "sync", "sharepoint" ], "variable": [ { "key": "moduleCode", "value": "code-of-conduct", "description": "Module route slug" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] } ] }, { "name": "evidence", "item": [ { "name": "Scan / Sync Evidence (Google + SharePoint + Confluence)", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/control-pages/:moduleCode/sync/evidence", "host": [ "{{baseUrl}}" ], "path": [ "api", "control-pages", ":moduleCode", "sync", "evidence" ], "variable": [ { "key": "moduleCode", "value": "code-of-conduct", "description": "Module route slug" } ] }, "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "description": "Single module-wise sync matching the control-page Scan / Sync Evidence button.", "body": { "mode": "raw", "raw": "{\n \"max_items\": 200\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "response": [ { "name": "Success", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/control-pages/:moduleCode/sync/evidence", "host": [ "{{baseUrl}}" ], "path": [ "api", "control-pages", ":moduleCode", "sync", "evidence" ], "variable": [ { "key": "moduleCode", "value": "code-of-conduct", "description": "Module route slug" } ] }, "body": { "mode": "raw", "raw": "{\n \"max_items\": 200\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] } ] } ] }, { "name": "Control page summary (policies + ATST validation matrix)", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "GET", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/control-pages/:moduleCode", "host": [ "{{baseUrl}}" ], "path": [ "api", "control-pages", ":moduleCode" ], "variable": [ { "key": "moduleCode", "value": "code-of-conduct", "description": "Module route slug" } ] }, "description": "Returns control context, linked policies, integrations, and `atst_validation` rows\n(`convention_id`, `atst_code`, status). Open an ATST via `/api/atst/{conventionId}`.\n" }, "response": [ { "name": "Success", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/control-pages/:moduleCode", "host": [ "{{baseUrl}}" ], "path": [ "api", "control-pages", ":moduleCode" ], "variable": [ { "key": "moduleCode", "value": "code-of-conduct", "description": "Module route slug" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" }, { "name": "Not found", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/control-pages/:moduleCode", "host": [ "{{baseUrl}}" ], "path": [ "api", "control-pages", ":moduleCode" ], "variable": [ { "key": "moduleCode", "value": "code-of-conduct", "description": "Module route slug" } ] } }, "status": "Not Found", "code": 404, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": false,\n \"message\": \"string\",\n \"errors\": {\n \"key_0\": 810,\n \"key_1\": \"string\"\n }\n}" } ] }, { "name": "send-approval", "item": [ { "name": "Send control to approval", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/control-pages/:moduleCode/send-approval", "host": [ "{{baseUrl}}" ], "path": [ "api", "control-pages", ":moduleCode", "send-approval" ], "variable": [ { "key": "moduleCode", "value": "code-of-conduct", "description": "Module route slug" } ] }, "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "description": "Same as the web Send to Approval button. Emails the configured Approver with an Approve link/token. Optional body control_code overrides the catalog code.", "body": { "mode": "raw", "raw": "{\n \"control_code\": \"CC1.1\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "response": [ { "name": "Success", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/control-pages/:moduleCode/send-approval", "host": [ "{{baseUrl}}" ], "path": [ "api", "control-pages", ":moduleCode", "send-approval" ], "variable": [ { "key": "moduleCode", "value": "code-of-conduct", "description": "Module route slug" } ] }, "body": { "mode": "raw", "raw": "{\n \"control_code\": \"CC1.1\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] } ] } ] }, { "name": "evidence-uploads", "item": [ { "name": "{uploadId}", "item": [ { "name": "file", "item": [ { "name": "Download evidence file", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "GET", "header": [ { "key": "Accept", "value": "application/octet-stream" } ], "url": { "raw": "{{baseUrl}}/api/control-pages/evidence-uploads/:uploadId/file", "host": [ "{{baseUrl}}" ], "path": [ "api", "control-pages", "evidence-uploads", ":uploadId", "file" ], "variable": [ { "key": "uploadId", "value": "3727" } ] } }, "response": [ { "name": "File binary", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/octet-stream" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/control-pages/evidence-uploads/:uploadId/file", "host": [ "{{baseUrl}}" ], "path": [ "api", "control-pages", "evidence-uploads", ":uploadId", "file" ], "variable": [ { "key": "uploadId", "value": "3727" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "text", "header": [ { "key": "Content-Type", "value": "application/octet-stream" } ], "cookie": [], "body": "string" } ] } ] } ] } ] }, { "name": "remediation-tickets", "item": [ { "name": "{ticketId}", "item": [ { "name": "Remediation ticket detail with evidence", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "GET", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/control-pages/remediation-tickets/:ticketId", "host": [ "{{baseUrl}}" ], "path": [ "api", "control-pages", "remediation-tickets", ":ticketId" ], "variable": [ { "key": "ticketId", "value": "3727" } ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/control-pages/remediation-tickets/:ticketId", "host": [ "{{baseUrl}}" ], "path": [ "api", "control-pages", "remediation-tickets", ":ticketId" ], "variable": [ { "key": "ticketId", "value": "3727" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] }, { "name": "send-email", "item": [ { "name": "Compose Send Email for remediation ticket", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "GET", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/control-pages/remediation-tickets/:ticketId/send-email", "host": [ "{{baseUrl}}" ], "path": [ "api", "control-pages", "remediation-tickets", ":ticketId", "send-email" ], "variable": [ { "key": "ticketId", "value": "1" } ] }, "description": "Returns active organization employees and default subject for the Send Email modal." }, "response": [ { "name": "Success", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/control-pages/remediation-tickets/:ticketId/send-email", "host": [ "{{baseUrl}}" ], "path": [ "api", "control-pages", "remediation-tickets", ":ticketId", "send-email" ], "variable": [ { "key": "ticketId", "value": "1" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] }, { "name": "Send Email for remediation ticket", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/control-pages/remediation-tickets/:ticketId/send-email", "host": [ "{{baseUrl}}" ], "path": [ "api", "control-pages", "remediation-tickets", ":ticketId", "send-email" ], "variable": [ { "key": "ticketId", "value": "1" } ] }, "description": "Same as the remediation ticket Send Email button. Use multipart/form-data with attachments[] for files.", "body": { "mode": "raw", "raw": "{\r\n \"employee_id\": 1,\r\n \"subject\": \"Regarding AT-62\",\r\n \"body\": \"Please review this remediation ticket.\",\r\n \"cc\": \"\",\r\n \"bcc\": \"\"\r\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "response": [ { "name": "Success", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/control-pages/remediation-tickets/:ticketId/send-email", "host": [ "{{baseUrl}}" ], "path": [ "api", "control-pages", "remediation-tickets", ":ticketId", "send-email" ], "variable": [ { "key": "ticketId", "value": "1" } ] }, "body": { "mode": "raw", "raw": "{\r\n \"employee_id\": 1,\r\n \"subject\": \"Regarding AT-62\",\r\n \"body\": \"Please review this remediation ticket.\",\r\n \"cc\": \"\",\r\n \"bcc\": \"\"\r\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] } ] } ] } ] } ] }, { "name": "control-approval", "item": [ { "name": "approve", "item": [ { "name": "Approve control via email token (public POST body)", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/control-approval/approve", "host": [ "{{baseUrl}}" ], "path": [ "api", "control-approval", "approve" ] }, "description": "Same as clicking Approve in the approval email. No Bearer auth. Pass approval_token from the email link.", "body": { "mode": "raw", "raw": "{\n \"token\": \"APPROVAL_TOKEN_FROM_EMAIL\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "response": [ { "name": "Success", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/control-approval/approve", "host": [ "{{baseUrl}}" ], "path": [ "api", "control-approval", "approve" ] }, "body": { "mode": "raw", "raw": "{\n \"token\": \"APPROVAL_TOKEN_FROM_EMAIL\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] }, { "name": "{token}", "item": [ { "name": "Approve control via path token (public GET)", "request": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/control-approval/approve/:token", "host": [ "{{baseUrl}}" ], "path": [ "api", "control-approval", "approve", ":token" ], "variable": [ { "key": "token", "value": "APPROVAL_TOKEN_FROM_EMAIL" } ] }, "description": "Deep-link friendly variant of email Approve (no Bearer auth)." }, "response": [ { "name": "Success", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/control-approval/approve/:token", "host": [ "{{baseUrl}}" ], "path": [ "api", "control-approval", "approve", ":token" ], "variable": [ { "key": "token", "value": "APPROVAL_TOKEN_FROM_EMAIL" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] }, { "name": "Approve control via path token (public POST)", "request": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/control-approval/approve/:token", "host": [ "{{baseUrl}}" ], "path": [ "api", "control-approval", "approve", ":token" ], "variable": [ { "key": "token", "value": "APPROVAL_TOKEN_FROM_EMAIL" } ] }, "description": "Same as GET; useful for mobile clients that prefer POST." }, "response": [ { "name": "Success", "originalRequest": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/control-approval/approve/:token", "host": [ "{{baseUrl}}" ], "path": [ "api", "control-approval", "approve", ":token" ], "variable": [ { "key": "token", "value": "APPROVAL_TOKEN_FROM_EMAIL" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] } ] } ] } ] }, { "name": "atst", "item": [ { "name": "{conventionId}", "item": [ { "name": "evidence-uploads", "item": [ { "name": "List evidence uploads for this ATST", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "GET", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/atst/:conventionId/evidence-uploads", "host": [ "{{baseUrl}}" ], "path": [ "api", "atst", ":conventionId", "evidence-uploads" ], "variable": [ { "key": "conventionId", "value": "12", "description": "ATST convention id from tbl_attest_evidence_conventions / atst_validation.convention_id" } ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/atst/:conventionId/evidence-uploads", "host": [ "{{baseUrl}}" ], "path": [ "api", "atst", ":conventionId", "evidence-uploads" ], "variable": [ { "key": "conventionId", "value": "12", "description": "ATST convention id from tbl_attest_evidence_conventions / atst_validation.convention_id" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] }, { "name": "Filter evidence uploads by coverage dates", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"module_route\": \"code-of-conduct\",\n \"from\": \"2026-01-01\",\n \"to\": \"2026-07-31\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "description": "Same as ATST view Evidence Uploads coverage filter (eu_from/eu_to). Omit dates to default to current month.", "url": { "raw": "{{baseUrl}}/api/atst/:conventionId/evidence-uploads/filter", "host": [ "{{baseUrl}}" ], "path": [ "api", "atst", ":conventionId", "evidence-uploads", "filter" ], "variable": [ { "key": "conventionId", "value": "12", "description": "ATST convention id from tbl_attest_evidence_conventions / atst_validation.convention_id" } ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"module_route\": \"code-of-conduct\",\n \"from\": \"2026-01-01\",\n \"to\": \"2026-07-31\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/atst/:conventionId/evidence-uploads/filter", "host": [ "{{baseUrl}}" ], "path": [ "api", "atst", ":conventionId", "evidence-uploads", "filter" ], "variable": [ { "key": "conventionId", "value": "12", "description": "ATST convention id from tbl_attest_evidence_conventions / atst_validation.convention_id" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"Success\",\n \"data\": {\n \"convention_id\": 12,\n \"atst_code\": \"ATST-101\",\n \"can_upload\": true,\n \"coverage_from\": \"2026-01-01\",\n \"coverage_to\": \"2026-07-31\",\n \"uploads\": []\n }\n}" } ] }, { "name": "Upload evidence file for this ATST", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "POST", "header": [ { "key": "Content-Type", "value": "multipart/form-data" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "formdata", "formdata": [ { "key": "evidence_file", "type": "file", "value": null } ] }, "url": { "raw": "{{baseUrl}}/api/atst/:conventionId/evidence-uploads", "host": [ "{{baseUrl}}" ], "path": [ "api", "atst", ":conventionId", "evidence-uploads" ], "variable": [ { "key": "conventionId", "value": "12", "description": "ATST convention id from tbl_attest_evidence_conventions / atst_validation.convention_id" } ] }, "description": "Requires super_admin or auditor role. Multipart field name `evidence_file`." }, "response": [ { "name": "Success", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "multipart/form-data" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "formdata", "formdata": [ { "key": "evidence_file", "type": "file", "src": [] } ] }, "url": { "raw": "{{baseUrl}}/api/atst/:conventionId/evidence-uploads", "host": [ "{{baseUrl}}" ], "path": [ "api", "atst", ":conventionId", "evidence-uploads" ], "variable": [ { "key": "conventionId", "value": "12", "description": "ATST convention id from tbl_attest_evidence_conventions / atst_validation.convention_id" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" }, { "name": "Permission denied", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "multipart/form-data" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "formdata", "formdata": [ { "key": "evidence_file", "type": "file", "src": [] } ] }, "url": { "raw": "{{baseUrl}}/api/atst/:conventionId/evidence-uploads", "host": [ "{{baseUrl}}" ], "path": [ "api", "atst", ":conventionId", "evidence-uploads" ], "variable": [ { "key": "conventionId", "value": "12", "description": "ATST convention id from tbl_attest_evidence_conventions / atst_validation.convention_id" } ] } }, "status": "Forbidden", "code": 403, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": false,\n \"message\": \"string\",\n \"errors\": {\n \"key_0\": 810,\n \"key_1\": \"string\"\n }\n}" } ] } ] }, { "name": "remediation-tickets", "item": [ { "name": "List remediation tickets for this ATST", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "GET", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/atst/:conventionId/remediation-tickets", "host": [ "{{baseUrl}}" ], "path": [ "api", "atst", ":conventionId", "remediation-tickets" ], "variable": [ { "key": "conventionId", "value": "12", "description": "ATST convention id from tbl_attest_evidence_conventions / atst_validation.convention_id" } ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/atst/:conventionId/remediation-tickets", "host": [ "{{baseUrl}}" ], "path": [ "api", "atst", ":conventionId", "remediation-tickets" ], "variable": [ { "key": "conventionId", "value": "12", "description": "ATST convention id from tbl_attest_evidence_conventions / atst_validation.convention_id" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] }, { "name": "Filter remediation tickets by date range", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"module_route\": \"code-of-conduct\",\n \"from\": \"2026-01-01\",\n \"to\": \"2026-07-31\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "description": "Same as ATST view Remediation Tickets coverage filter (rt_from/rt_to). Omit dates to default to audit period or current month.", "url": { "raw": "{{baseUrl}}/api/atst/:conventionId/remediation-tickets/filter", "host": [ "{{baseUrl}}" ], "path": [ "api", "atst", ":conventionId", "remediation-tickets", "filter" ], "variable": [ { "key": "conventionId", "value": "12", "description": "ATST convention id from tbl_attest_evidence_conventions / atst_validation.convention_id" } ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"module_route\": \"code-of-conduct\",\n \"from\": \"2026-01-01\",\n \"to\": \"2026-07-31\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/atst/:conventionId/remediation-tickets/filter", "host": [ "{{baseUrl}}" ], "path": [ "api", "atst", ":conventionId", "remediation-tickets", "filter" ], "variable": [ { "key": "conventionId", "value": "12", "description": "ATST convention id from tbl_attest_evidence_conventions / atst_validation.convention_id" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"Success\",\n \"data\": {\n \"convention_id\": 12,\n \"atst_code\": \"ATST-101\",\n \"coverage_from\": \"2026-01-01\",\n \"coverage_to\": \"2026-07-31\",\n \"tickets\": []\n }\n}" } ] }, { "name": "Create remediation ticket for this ATST", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"title\": \"string\",\n \"description\": \"string\",\n \"labels\": \"string\",\n \"change_management_result_id\": 5157\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/atst/:conventionId/remediation-tickets", "host": [ "{{baseUrl}}" ], "path": [ "api", "atst", ":conventionId", "remediation-tickets" ], "variable": [ { "key": "conventionId", "value": "12", "description": "ATST convention id from tbl_attest_evidence_conventions / atst_validation.convention_id" } ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"title\": \"string\",\n \"description\": \"string\",\n \"labels\": \"string\",\n \"change_management_result_id\": 5157\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/atst/:conventionId/remediation-tickets", "host": [ "{{baseUrl}}" ], "path": [ "api", "atst", ":conventionId", "remediation-tickets" ], "variable": [ { "key": "conventionId", "value": "12", "description": "ATST convention id from tbl_attest_evidence_conventions / atst_validation.convention_id" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] }, { "name": "Sync remediation tickets by issue key", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"module_route\": \"code-of-conduct\",\n \"sync_mode\": \"issue_key\",\n \"issue_key\": \"AT-123\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/atst/:conventionId/remediation-tickets/sync", "host": [ "{{baseUrl}}" ], "path": [ "api", "atst", ":conventionId", "remediation-tickets", "sync" ], "variable": [ { "key": "conventionId", "value": "12", "description": "ATST convention id from tbl_attest_evidence_conventions / atst_validation.convention_id" } ] } }, "response": [] }, { "name": "Sync remediation tickets by date range", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"module_route\": \"code-of-conduct\",\n \"sync_mode\": \"date_range\",\n \"date_from\": \"2026-01-01\",\n \"date_to\": \"2026-07-31\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/atst/:conventionId/remediation-tickets/sync", "host": [ "{{baseUrl}}" ], "path": [ "api", "atst", ":conventionId", "remediation-tickets", "sync" ], "variable": [ { "key": "conventionId", "value": "12", "description": "ATST convention id from tbl_attest_evidence_conventions / atst_validation.convention_id" } ] } }, "response": [] } ] }, { "name": "control-tasks", "item": [ { "name": "List control tasks for this ATST", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "GET", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/atst/:conventionId/control-tasks", "host": [ "{{baseUrl}}" ], "path": [ "api", "atst", ":conventionId", "control-tasks" ], "variable": [ { "key": "conventionId", "value": "12", "description": "ATST convention id from tbl_attest_evidence_conventions / atst_validation.convention_id" } ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/atst/:conventionId/control-tasks", "host": [ "{{baseUrl}}" ], "path": [ "api", "atst", ":conventionId", "control-tasks" ], "variable": [ { "key": "conventionId", "value": "12", "description": "ATST convention id from tbl_attest_evidence_conventions / atst_validation.convention_id" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] }, { "name": "Create control task for this ATST", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"title\": \"string\",\n \"assigned_user_id\": 995,\n \"description\": \"string\",\n \"priority\": \"high\",\n \"due_date\": \"1968-02-12\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/atst/:conventionId/control-tasks", "host": [ "{{baseUrl}}" ], "path": [ "api", "atst", ":conventionId", "control-tasks" ], "variable": [ { "key": "conventionId", "value": "12", "description": "ATST convention id from tbl_attest_evidence_conventions / atst_validation.convention_id" } ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"title\": \"string\",\n \"assigned_user_id\": 995,\n \"description\": \"string\",\n \"priority\": \"high\",\n \"due_date\": \"1968-02-12\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/atst/:conventionId/control-tasks", "host": [ "{{baseUrl}}" ], "path": [ "api", "atst", ":conventionId", "control-tasks" ], "variable": [ { "key": "conventionId", "value": "12", "description": "ATST convention id from tbl_attest_evidence_conventions / atst_validation.convention_id" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] } ] }, { "name": "synced-evidence", "item": [ { "name": "Phrase-matched Google / Confluence / SharePoint evidence for this ATST", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "GET", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/atst/:conventionId/synced-evidence", "host": [ "{{baseUrl}}" ], "path": [ "api", "atst", ":conventionId", "synced-evidence" ], "variable": [ { "key": "conventionId", "value": "12", "description": "ATST convention id from tbl_attest_evidence_conventions / atst_validation.convention_id" } ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/atst/:conventionId/synced-evidence", "host": [ "{{baseUrl}}" ], "path": [ "api", "atst", ":conventionId", "synced-evidence" ], "variable": [ { "key": "conventionId", "value": "12", "description": "ATST convention id from tbl_attest_evidence_conventions / atst_validation.convention_id" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] } ] }, { "name": "sync", "item": [ { "name": "confluence", "item": [ { "name": "Sync Confluence using this ATST evidence phrase (default query)", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"search_query\": \"string\",\n \"max_pages\": 50\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/atst/:conventionId/sync/confluence", "host": [ "{{baseUrl}}" ], "path": [ "api", "atst", ":conventionId", "sync", "confluence" ], "variable": [ { "key": "conventionId", "value": "12", "description": "ATST convention id from tbl_attest_evidence_conventions / atst_validation.convention_id" } ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "body": { "mode": "raw", "raw": "{\n \"search_query\": \"string\",\n \"max_pages\": 50\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/atst/:conventionId/sync/confluence", "host": [ "{{baseUrl}}" ], "path": [ "api", "atst", ":conventionId", "sync", "confluence" ], "variable": [ { "key": "conventionId", "value": "12", "description": "ATST convention id from tbl_attest_evidence_conventions / atst_validation.convention_id" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] } ] } ] }, { "name": "specialty", "item": [ { "name": "ownership-matrix", "item": [ { "name": "ATST-122 \u2014 Control Ownership Matrix (module list)", "request": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/atst/:conventionId/specialty/ownership-matrix", "host": [ "{{baseUrl}}" ], "path": [ "api", "atst", ":conventionId", "specialty", "ownership-matrix" ], "variable": [ { "key": "conventionId", "value": "12", "description": "ATST convention id from tbl_attest_evidence_conventions / atst_validation.convention_id" } ] }, "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "description": "CC1.5 / ATST-122 \u2014 returns modules_listing. Each row includes module_id for notify-owner. Use ATST-122 conventionId." }, "response": [ { "name": "Success", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/atst/:conventionId/specialty/ownership-matrix", "host": [ "{{baseUrl}}" ], "path": [ "api", "atst", ":conventionId", "specialty", "ownership-matrix" ], "variable": [ { "key": "conventionId", "value": "12", "description": "ATST convention id from tbl_attest_evidence_conventions / atst_validation.convention_id" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] } ] }, { "name": "policy-library", "item": [ { "name": "ATST-505 \u2014 Policy Documents by Module", "request": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/atst/:conventionId/specialty/policy-library", "host": [ "{{baseUrl}}" ], "path": [ "api", "atst", ":conventionId", "specialty", "policy-library" ], "variable": [ { "key": "conventionId", "value": "12", "description": "ATST convention id from tbl_attest_evidence_conventions / atst_validation.convention_id" } ] }, "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "description": "CC5.3 / ATST-505 \u2014 module_policy_list, unlinked_policies, document_types. Use ATST-505 conventionId." }, "response": [ { "name": "Success", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/atst/:conventionId/specialty/policy-library", "host": [ "{{baseUrl}}" ], "path": [ "api", "atst", ":conventionId", "specialty", "policy-library" ], "variable": [ { "key": "conventionId", "value": "12", "description": "ATST convention id from tbl_attest_evidence_conventions / atst_validation.convention_id" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] } ] }, { "name": "notify-owner", "item": [ { "name": "ATST-122 \u2014 notify auditors of missing primary control owner", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/atst/:conventionId/specialty/notify-owner", "host": [ "{{baseUrl}}" ], "path": [ "api", "atst", ":conventionId", "specialty", "notify-owner" ], "variable": [ { "key": "conventionId", "value": "12", "description": "ATST convention id from tbl_attest_evidence_conventions / atst_validation.convention_id" } ] }, "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "description": "CC1.5 / ATST-122 \u2014 pass module_id from ownership-matrix modules_listing[].module_id when primary owner is Absent.", "body": { "mode": "raw", "raw": "{\n \"module_id\": 12\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "response": [ { "name": "Success", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/atst/:conventionId/specialty/notify-owner", "host": [ "{{baseUrl}}" ], "path": [ "api", "atst", ":conventionId", "specialty", "notify-owner" ], "variable": [ { "key": "conventionId", "value": "12", "description": "ATST convention id from tbl_attest_evidence_conventions / atst_validation.convention_id" } ] }, "body": { "mode": "raw", "raw": "{\n \"module_id\": 12\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] } ] }, { "name": "sync-change-accountability", "item": [ { "name": "ATST-207 \u2014 sync Jira Change Accountability Matrix", "request": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/atst/:conventionId/specialty/sync-change-accountability", "host": [ "{{baseUrl}}" ], "path": [ "api", "atst", ":conventionId", "specialty", "sync-change-accountability" ], "variable": [ { "key": "conventionId", "value": "12", "description": "ATST convention id from tbl_attest_evidence_conventions / atst_validation.convention_id" } ] }, "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "description": "CC2.2 / ATST-207 \u2014 sync Jira Change Accountability Matrix." }, "response": [ { "name": "Success", "originalRequest": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/atst/:conventionId/specialty/sync-change-accountability", "host": [ "{{baseUrl}}" ], "path": [ "api", "atst", ":conventionId", "specialty", "sync-change-accountability" ], "variable": [ { "key": "conventionId", "value": "12", "description": "ATST convention id from tbl_attest_evidence_conventions / atst_validation.convention_id" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] } ] }, { "name": "sync-email-evidence", "item": [ { "name": "ATST-210 \u2014 scan / sync email evidence timeline", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/atst/:conventionId/specialty/sync-email-evidence", "host": [ "{{baseUrl}}" ], "path": [ "api", "atst", ":conventionId", "specialty", "sync-email-evidence" ], "variable": [ { "key": "conventionId", "value": "12", "description": "ATST convention id from tbl_attest_evidence_conventions / atst_validation.convention_id" } ] }, "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "description": "CC2.3 / ATST-210 \u2014 Scan / Sync Evidence Timeline (Email Service).", "body": { "mode": "raw", "raw": "{\n \"subject_query\": \"\",\n \"limit\": 80\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "response": [ { "name": "Success", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/atst/:conventionId/specialty/sync-email-evidence", "host": [ "{{baseUrl}}" ], "path": [ "api", "atst", ":conventionId", "specialty", "sync-email-evidence" ], "variable": [ { "key": "conventionId", "value": "12", "description": "ATST convention id from tbl_attest_evidence_conventions / atst_validation.convention_id" } ] }, "body": { "mode": "raw", "raw": "{\n \"subject_query\": \"\",\n \"limit\": 80\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] } ] }, { "name": "jira-incidents", "item": [ { "name": "ATST-705 \u2014 Jira Incident Tickets list", "request": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/atst/:conventionId/specialty/jira-incidents", "host": [ "{{baseUrl}}" ], "path": [ "api", "atst", ":conventionId", "specialty", "jira-incidents" ], "variable": [ { "key": "conventionId", "value": "12", "description": "ATST convention id from tbl_attest_evidence_conventions / atst_validation.convention_id" } ] }, "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "description": "CC7.3 / ATST-705 \u2014 incident_tickets, scan date defaults, incident_policies. Use ATST-705 conventionId." }, "response": [ { "name": "Success", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/atst/:conventionId/specialty/jira-incidents", "host": [ "{{baseUrl}}" ], "path": [ "api", "atst", ":conventionId", "specialty", "jira-incidents" ], "variable": [ { "key": "conventionId", "value": "12", "description": "ATST convention id from tbl_attest_evidence_conventions / atst_validation.convention_id" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] } ] }, { "name": "sync-jira-incidents", "item": [ { "name": "ATST-705 \u2014 Scan & Save Jira incident tickets (NCDNT)", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/atst/:conventionId/specialty/sync-jira-incidents", "host": [ "{{baseUrl}}" ], "path": [ "api", "atst", ":conventionId", "specialty", "sync-jira-incidents" ], "variable": [ { "key": "conventionId", "value": "12", "description": "ATST convention id from tbl_attest_evidence_conventions / atst_validation.convention_id" } ] }, "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "description": "CC7.3 / ATST-705 \u2014 Scan & Save Jira Incident Tickets (NCDNT).", "body": { "mode": "raw", "raw": "{\n \"project_key\": \"NCDNT\",\n \"date_from\": \"2026-01-01\",\n \"date_to\": \"2026-07-31\",\n \"max_results\": 100\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "response": [ { "name": "Success", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/atst/:conventionId/specialty/sync-jira-incidents", "host": [ "{{baseUrl}}" ], "path": [ "api", "atst", ":conventionId", "specialty", "sync-jira-incidents" ], "variable": [ { "key": "conventionId", "value": "12", "description": "ATST convention id from tbl_attest_evidence_conventions / atst_validation.convention_id" } ] }, "body": { "mode": "raw", "raw": "{\n \"project_key\": \"NCDNT\",\n \"date_from\": \"2026-01-01\",\n \"date_to\": \"2026-07-31\",\n \"max_results\": 100\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] } ] }, { "name": "compliance-scan", "item": [ { "name": "ATST-802 \u2014 run change-management compliance scan", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/atst/:conventionId/specialty/compliance-scan", "host": [ "{{baseUrl}}" ], "path": [ "api", "atst", ":conventionId", "specialty", "compliance-scan" ], "variable": [ { "key": "conventionId", "value": "12", "description": "ATST convention id from tbl_attest_evidence_conventions / atst_validation.convention_id" } ] }, "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "description": "CC8.1 / ATST-802 \u2014 Run compliance scan (merged pull requests).", "body": { "mode": "raw", "raw": "{\n \"scan_date\": \"2026-07-30\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "response": [ { "name": "Success", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/atst/:conventionId/specialty/compliance-scan", "host": [ "{{baseUrl}}" ], "path": [ "api", "atst", ":conventionId", "specialty", "compliance-scan" ], "variable": [ { "key": "conventionId", "value": "12", "description": "ATST convention id from tbl_attest_evidence_conventions / atst_validation.convention_id" } ] }, "body": { "mode": "raw", "raw": "{\n \"scan_date\": \"2026-07-30\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] } ] }, { "name": "refresh-compliance-status", "item": [ { "name": "ATST-802 \u2014 refresh failed row status", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/atst/:conventionId/specialty/refresh-compliance-status", "host": [ "{{baseUrl}}" ], "path": [ "api", "atst", ":conventionId", "specialty", "refresh-compliance-status" ], "variable": [ { "key": "conventionId", "value": "12", "description": "ATST convention id from tbl_attest_evidence_conventions / atst_validation.convention_id" } ] }, "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "description": "CC8.1 / ATST-802 \u2014 Refresh status on Merged pull requests / compliance scan section.", "body": { "mode": "raw", "raw": "{\n \"scan_date\": \"2026-07-30\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "response": [ { "name": "Success", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/atst/:conventionId/specialty/refresh-compliance-status", "host": [ "{{baseUrl}}" ], "path": [ "api", "atst", ":conventionId", "specialty", "refresh-compliance-status" ], "variable": [ { "key": "conventionId", "value": "12", "description": "ATST convention id from tbl_attest_evidence_conventions / atst_validation.convention_id" } ] }, "body": { "mode": "raw", "raw": "{\n \"scan_date\": \"2026-07-30\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] } ] } ] }, { "name": "send-email", "item": [ { "name": "Compose Send Email (active employees + defaults)", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "GET", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/atst/:conventionId/send-email?module_route=code-of-conduct", "host": [ "{{baseUrl}}" ], "path": [ "api", "atst", ":conventionId", "send-email" ], "query": [ { "key": "module_route", "value": "code-of-conduct" } ], "variable": [ { "key": "conventionId", "value": "12", "description": "ATST convention id" } ] }, "description": "Returns active organization employees and default subject for the ATST Send Email modal." }, "response": [ { "name": "Success", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/atst/:conventionId/send-email?module_route=code-of-conduct", "host": [ "{{baseUrl}}" ], "path": [ "api", "atst", ":conventionId", "send-email" ], "query": [ { "key": "module_route", "value": "code-of-conduct" } ], "variable": [ { "key": "conventionId", "value": "12", "description": "ATST convention id" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] }, { "name": "Send Email for this ATST", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/atst/:conventionId/send-email?module_route=code-of-conduct", "host": [ "{{baseUrl}}" ], "path": [ "api", "atst", ":conventionId", "send-email" ], "query": [ { "key": "module_route", "value": "code-of-conduct" } ], "variable": [ { "key": "conventionId", "value": "12", "description": "ATST convention id" } ] }, "description": "Same as the ATST Send Email button. Use multipart/form-data with attachments[] for files.", "body": { "mode": "raw", "raw": "{\r\n \"employee_id\": 1,\r\n \"subject\": \"Regarding ATST-101\",\r\n \"body\": \"Please review this ATST evidence requirement.\",\r\n \"cc\": \"\",\r\n \"bcc\": \"\"\r\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "response": [ { "name": "Success", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/atst/:conventionId/send-email?module_route=code-of-conduct", "host": [ "{{baseUrl}}" ], "path": [ "api", "atst", ":conventionId", "send-email" ], "query": [ { "key": "module_route", "value": "code-of-conduct" } ], "variable": [ { "key": "conventionId", "value": "12", "description": "ATST convention id" } ] }, "body": { "mode": "raw", "raw": "{\r\n \"employee_id\": 1,\r\n \"subject\": \"Regarding ATST-101\",\r\n \"body\": \"Please review this ATST evidence requirement.\",\r\n \"cc\": \"\",\r\n \"bcc\": \"\"\r\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] } ] }, { "name": "mark-pass", "item": [ { "name": "Manually mark this ATST as Pass", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "POST", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/atst/:conventionId/mark-pass", "host": [ "{{baseUrl}}" ], "path": [ "api", "atst", ":conventionId", "mark-pass" ], "variable": [ { "key": "conventionId", "value": "12", "description": "ATST convention id from tbl_attest_evidence_conventions / atst_validation.convention_id" } ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/atst/:conventionId/mark-pass", "host": [ "{{baseUrl}}" ], "path": [ "api", "atst", ":conventionId", "mark-pass" ], "variable": [ { "key": "conventionId", "value": "12", "description": "ATST convention id from tbl_attest_evidence_conventions / atst_validation.convention_id" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] } ] }, { "name": "mark-fail", "item": [ { "name": "Manually mark this ATST as Fail", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "POST", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/atst/:conventionId/mark-fail", "host": [ "{{baseUrl}}" ], "path": [ "api", "atst", ":conventionId", "mark-fail" ], "variable": [ { "key": "conventionId", "value": "12", "description": "ATST convention id from tbl_attest_evidence_conventions / atst_validation.convention_id" } ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/atst/:conventionId/mark-fail", "host": [ "{{baseUrl}}" ], "path": [ "api", "atst", ":conventionId", "mark-fail" ], "variable": [ { "key": "conventionId", "value": "12", "description": "ATST convention id from tbl_attest_evidence_conventions / atst_validation.convention_id" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] } ] }, { "name": "Full ATST detail (validation, uploads, tickets, tasks, synced evidence)", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "GET", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/atst/:conventionId?module_route=code-of-conduct", "host": [ "{{baseUrl}}" ], "path": [ "api", "atst", ":conventionId" ], "query": [ { "key": "module_route", "value": "code-of-conduct" } ], "variable": [ { "key": "conventionId", "value": "12", "description": "ATST convention id from tbl_attest_evidence_conventions / atst_validation.convention_id" } ] } }, "response": [ { "name": "Success", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/atst/:conventionId?module_route=code-of-conduct", "host": [ "{{baseUrl}}" ], "path": [ "api", "atst", ":conventionId" ], "query": [ { "key": "module_route", "value": "code-of-conduct" } ], "variable": [ { "key": "conventionId", "value": "12", "description": "ATST convention id from tbl_attest_evidence_conventions / atst_validation.convention_id" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" }, { "name": "Not found", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/atst/:conventionId?module_route=code-of-conduct", "host": [ "{{baseUrl}}" ], "path": [ "api", "atst", ":conventionId" ], "query": [ { "key": "module_route", "value": "code-of-conduct" } ], "variable": [ { "key": "conventionId", "value": "12", "description": "ATST convention id from tbl_attest_evidence_conventions / atst_validation.convention_id" } ] } }, "status": "Not Found", "code": 404, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": false,\n \"message\": \"string\",\n \"errors\": {\n \"key_0\": 810,\n \"key_1\": \"string\"\n }\n}" } ] }, { "name": "campaign-responses", "item": [ { "name": "List campaign responses for ATST", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}", "type": "string" } ] }, "method": "GET", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/atst/:conventionId/campaign-responses", "host": [ "{{baseUrl}}" ], "path": [ "api", "atst", ":conventionId", "campaign-responses" ], "variable": [ { "key": "conventionId", "value": "12" } ] }, "description": "Acknowledgment / campaign responses for this ATST convention." }, "response": [ { "name": "Success", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: bearer", "key": "Authorization", "value": "Bearer " } ], "url": { "raw": "{{baseUrl}}/api/atst/:conventionId/campaign-responses", "host": [ "{{baseUrl}}" ], "path": [ "api", "atst", ":conventionId", "campaign-responses" ], "variable": [ { "key": "conventionId", "value": "12" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "body": "{\n \"status\": true,\n \"message\": \"string\",\n \"data\": {}\n}" } ] } ] } ] } ] }, { "name": "control", "item": [ { "name": "control side menu", "request": { "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "93fdde580f86c59e4cb69a17624797f8:25313823df3797a1eeee48aaf158915950492c5c94d0f4dac69986876d505434", "type": "string" } ] }, "method": "GET", "header": [], "url": { "raw": "{{baseUrl}}/api/controls/menu", "host": [ "{{baseUrl}}" ], "path": [ "api", "controls", "menu" ] } }, "response": [] } ] }, { "name": "email-compose", "item": [ { "name": "get email campaign", "request": { "method": "GET", "header": [], "url": { "raw": "{{baseUrl}}/api/atst/:id/sent-email-campaigns", "host": [ "{{baseUrl}}" ], "path": [ "api", "atst", ":id", "sent-email-campaigns" ], "variable": [ { "key": "id", "value": "1" } ] } }, "response": [] }, { "name": "view response", "request": { "method": "GET", "header": [], "url": { "raw": "{{baseUrl}}/api/atst/:id/sent-email-campaigns?reference=19fa3a2c21406674", "host": [ "{{baseUrl}}" ], "path": [ "api", "atst", ":id", "sent-email-campaigns" ], "query": [ { "key": "reference", "value": "19fa3a2c21406674" } ], "variable": [ { "key": "id", "value": "1" } ] } }, "response": [] }, { "name": "compose email", "request": { "method": "POST", "header": [], "body": { "mode": "formdata", "formdata": [ { "key": "to_employee_ids[]", "value": "", "type": "text", "uuid": "7fa670fd-0f69-4843-bd6e-856908dd9dfe" }, { "key": "cc_employee_ids[]", "value": "", "type": "text", "uuid": "612692c3-e4a7-4dbe-8c7a-48b76a3df2fe" }, { "key": "bcc_employee_ids[]", "value": "", "type": "text", "uuid": "2a742a4a-1130-46cf-9c0b-caefdef58c0d" }, { "key": "subject", "value": "", "type": "text", "uuid": "245c4a3a-bffe-41ef-a541-7294171a6843" }, { "key": "content", "value": "", "type": "text", "uuid": "82631aa2-d432-4c86-8b0b-8f26c8c93f93" }, { "key": "campaign_attachment", "type": "file", "uuid": "df94e1c5-405c-4c2f-92f2-429c4ee39b25", "value": null } ] }, "url": { "raw": "{{baseUrl}}/api/atst/:id/compose-email", "host": [ "{{baseUrl}}" ], "path": [ "api", "atst", ":id", "compose-email" ], "variable": [ { "key": "id", "value": "1" } ] } }, "response": [] }, { "name": "delete campaign", "request": { "method": "DELETE", "header": [], "body": { "mode": "raw", "raw": "{\r\n \"acknowledgment_reference\": \"19fa3a2c21406674\"\r\n}", "options": { "raw": { "language": "json" } } }, "url": { "raw": "{{baseUrl}}/api/atst/:id/sent-email-campaigns", "host": [ "{{baseUrl}}" ], "path": [ "api", "atst", ":id", "sent-email-campaigns" ], "variable": [ { "key": "id", "value": "1" } ] } }, "response": [] }, { "name": "sync response status", "request": { "method": "POST", "header": [], "url": { "raw": "{{baseUrl}}/api/atst/:id/sync-response-status", "host": [ "{{baseUrl}}" ], "path": [ "api", "atst", ":id", "sync-response-status" ], "variable": [ { "key": "id", "value": "1" } ] } }, "response": [] } ] } ] } ], "variable": [ { "key": "baseUrl", "value": "https://dev.attestpath.ai" } ] }