> ## Documentation Index > Fetch the complete documentation index at: https://docs.activeviam.com/llms.txt > Use this file to discover all available pages before exploring further. # List a user's report row restrictions. > Returns row restrictions for a user in the caller's organisation. The caller may inspect their own restrictions where allowed; other-user access remains subject to administrator rules. Target identity, organisation membership, user type, and report access are server-managed. This is a read-only operation. ## OpenAPI ````yaml /risk-and-pricing/atoti-risk-services/apis-endpoints/openapi/openapi.mintlify.json get /api/ReportRestriction openapi: 3.0.4 info: title: Derivitec Api 1.0 version: '1.0' servers: - url: https://api.riskportal.activeviam.com security: - oauth2: [] - apikey: [] tags: - name: AdminUser - name: AtotiReport - name: AtotiSession - name: BloombergOAuth - name: Bond - name: BondYieldCurvePage - name: BookAccess - name: Books - name: Commodity - name: Counterparties - name: Currencies - name: Equity - name: EquityDividend - name: EquityPage - name: FeatureFlag - name: Fx - name: FxPage - name: GroupAccess - name: Home - name: LegacyPosition - name: MarketData - name: MarketDataProvider - name: MarketDataProviderAccess - name: Meta - name: Notification - name: Organisation - name: PnLReport - name: PortfolioAccess - name: Portfolios - name: Position - name: PositionFilter - name: PricingEnvironment - name: PricingEnvironmentAccess - name: RateAsset - name: RateAssetPage - name: Report - name: ReportDefinition - name: ReportHistoryLauncherQuery - name: ReportLauncher - name: ReportQuery - name: ReportQueryViewUser - name: ReportRestriction - name: ReportView - name: RiskReport - name: Tradable - name: TradeBooking - name: User - name: VarReport - name: VarReportQuery - name: YieldCurvePage paths: /api/ReportRestriction: get: tags: - ReportRestriction summary: List a user's report row restrictions. description: >- Returns row restrictions for a user in the caller's organisation. The caller may inspect their own restrictions where allowed; other-user access remains subject to administrator rules. Target identity, organisation membership, user type, and report access are server-managed. This is a read-only operation. operationId: Get parameters: - name: userEmail in: query description: >- The required email address of the target user in the caller's organisation. Although the current schema does not mark it required, omit or null can cause binding failure; surrounding whitespace and letter case are normalized. schema: type: string responses: '200': description: >- Returns the target user's report row restrictions, or an unsuccessful envelope for target-user, membership, or access failures. content: application/json: schema: $ref: '#/components/schemas/ApiReportRestrictionGetResponse' '400': description: BadRequest '401': description: Unauthorized '403': description: Forbidden security: - oauth2: [] - apikey: [] components: schemas: ApiReportRestrictionGetResponse: required: - $type type: object properties: is_success: type: boolean description: >- Whether the operation completed successfully. The default is `true`; error outcomes set it to `false`. example: true error_messages: type: array items: type: string description: >- Messages explaining operation-level failures. The collection is empty by default. nullable: true report_restrictions: type: array items: $ref: '#/components/schemas/ReportRestriction' description: Saved report row restrictions returned by the operation. nullable: true $type: type: string enum: - >- Derivitec.Web.Core.ReportRestriction.ApiReportRestrictionGetResponse, Derivitec.Web.Core additionalProperties: false description: Saved report-row restrictions visible to the caller. ReportRestriction: required: - $type type: object properties: report_name: type: string description: >- Name of the report definition associated with the run, schedule, restriction, or launcher item. nullable: true row_filter: $ref: '#/components/schemas/FilterBase' validation_errors: type: array items: type: string description: >- Validation messages for the saved row filter; an absent row filter yields an empty list. nullable: true readOnly: true $type: type: string enum: - >- Derivitec.Web.Core.ReportRestriction.ReportRestriction, Derivitec.Web.Core additionalProperties: false description: Saved row restriction associated with a report. FilterBase: description: Base selection criterion for a named report-data field. discriminator: propertyName: $type mapping: Derivitec.Web.Core.Filters.Filter, Derivitec.Web.Core: '#/components/schemas/FilterMintlifyShape' Derivitec.Web.Core.Filters.FilterBase, Derivitec.Web.Core: '#/components/schemas/FilterBaseMintlifyShape' Derivitec.Web.Core.Filters.MultiFilter, Derivitec.Web.Core: '#/components/schemas/MultiFilter' Derivitec.Web.Core.Filters.StringFilter, Derivitec.Web.Core: '#/components/schemas/StringFilter' oneOf: - $ref: '#/components/schemas/FilterMintlifyShape' - $ref: '#/components/schemas/FilterBaseMintlifyShape' - $ref: '#/components/schemas/MultiFilter' - $ref: '#/components/schemas/StringFilter' FilterMintlifyShape: required: - $type type: object properties: field: type: string description: Name of the report-data field evaluated by this criterion. nullable: true type: type: string nullable: true $type: type: string enum: - Derivitec.Web.Core.Filters.Filter, Derivitec.Web.Core additionalProperties: false FilterBaseMintlifyShape: required: - $type type: object properties: field: type: string description: Name of the report-data field evaluated by this criterion. nullable: true $type: type: string enum: - Derivitec.Web.Core.Filters.FilterBase, Derivitec.Web.Core additionalProperties: false description: Base selection criterion for a named report-data field. MultiFilter: required: - $type type: object properties: field: type: string description: Name of the report-data field evaluated by this criterion. nullable: true operator: enum: - not_set - and - or type: string description: Logical rule used to combine the child criteria. conditions: type: array items: $ref: '#/components/schemas/FilterBase' description: >- Child criteria evaluated by the selected logical operator; nested groups are permitted. nullable: true $type: type: string enum: - Derivitec.Web.Core.Filters.MultiFilter, Derivitec.Web.Core additionalProperties: false description: >- Nested filter group that combines child criteria with a logical operator. StringFilter: required: - $type type: object properties: field: type: string description: Name of the report-data field evaluated by this criterion. nullable: true type: type: string nullable: true filter: type: string nullable: true $type: type: string enum: - Derivitec.Web.Core.Filters.StringFilter, Derivitec.Web.Core additionalProperties: false securitySchemes: oauth2: type: oauth2 description: >- OAuth2 access-token requested from AWS Cognito and provided as a Auth Bearer header flows: implicit: authorizationUrl: https://auth.riskportal.derivitec.com/oauth2/authorize scopes: {} apikey: type: apiKey description: API-Key requested via the site and provided as a header name: x-api-key in: header ````