Deny or cancel a project access request
DELETE
/projects/{projectId}/project_access_requests/{requestId}
Admins can deny a pending access request; the requesting user can cancel their own request. If SMTP is enabled, a rejection email is sent when an admin denies. Returns JSON with toast and destroyed request ID, or HTML redirect for browser requests.
Authorizations
tokenAuth
Personal access token authentication. Send via Authorization header: Authorization: Token vulcan_xxx. Tokens are SHA-256 hashed server-side (never stored in plaintext). Scopes: read (GET), write (mutations), admin (everything). Create tokens via Settings → API Tokens in the web UI.
Type
HTTP (token)
Parameters
Path Parameters
projectId*
Numeric ID of the project.
Type
Requiredinteger
Example
7requestId*
Numeric ID of the access request.
Type
Requiredinteger
Example
42Responses
Access request destroyed successfully
application/json
JSON "toast": { "title": "Access request denied.", "message": [ "Successfully denied Jane Doe's request to access project." ], "variant": "success" }, "id": 42
{
}