🚧

Under construction

This endpoint is in beta. Functionality may change without notice, support is limited, and use in production is not recommended. Your feedback is appreciated.

Returns +{ "granted": true }+ if the permission is held by any of the
user's assigned roles; +{ "granted": false }+ otherwise. Never 404s on
the permission key itself — only on a missing user.