Returns a list of access requests for a specific project. Used by authorized users to review who has requested access and what their current status is.
The number in the URL path (/1/) is the organization identifier — referred to as account_id.
This value must match the account associated with the provided session_id.
This endpoint supports both:
GET https://api.doboard.com/42/project_access_get?project_id=1&session_id=abc123xyz
In this example:
42 is the organization/account IDproject_id=1 ID of the project to fetch access requests forsession_id=abc123xyz is used for authenticationRequired
This method is available only to authenticated users with the following roles:
Additionally, the user must already have access to the specified project.
Guest tokens (
token) are not supported.
| Parameter | Type | Required | Default | Description |
|---|---|---|---|---|
session_id |
string |
Yes | – | Session ID (13–32 alphanumeric characters) |
project_id |
int |
No | – | ID of the project to fetch access requests for |
status |
string |
No | – | Optional filter by request status: PENDING, APPROVED, or REJECTED |
user_id |
int |
No | – | Filter requests submitted by a specific user |
request_id |
int |
No | – | Get a specific access request by ID |
start |
int |
No | 0 |
Offset for pagination |
length |
int |
No | 100 |
Limit per page. Allowed: 10, 25, 50, 100 |
{
"data": {
"operation_status": "SUCCESS",
"access": [
{
"request_id": 4,
"user_id": 12,
"project_id": 5,
"request_message": "I'd like to join",
"status": "PENDING",
"reviewed_user_id": null,
"reviewed": null,
"created": "2025-07-01 12:45:00",
"updated": "2025-07-01 12:45:00"
}
],
"records_filtered": 1
}
}
| Field | Type | Description |
|---|---|---|
request_id |
int |
Unique ID of the access request |
user_id |
int |
Requesting user's ID |
project_id |
int |
Associated project ID |
request_message |
string/null |
Optional message from the user |
status |
string |
One of: PENDING, APPROVED, REJECTED |
reviewed_user_id |
int/null |
ID of the user who reviewed the request |
reviewed |
datetime/null |
Time of review |
created |
datetime |
Request creation time |
updated |
datetime |
Last modification time |
| HTTP Code | error_no |
Message | Description |
|---|---|---|---|
401 |
401 |
Unauthorized |
No session or token provided |
200 |
2101 |
status must be in (...) |
Invalid status value |
403 |
403 |
Access is denied |
User has no access to requested project |
500 |
0 |
Internal API Error |
Internal error |
200 |
7 |
limit reached |
Too many session attempts from same IP |
| Role | Requires Project Access | Allowed |
|---|---|---|
ADMIN |
❌ No | ✅ Yes |
PROJECT_MANAGER |
✅ Yes | ✅ Yes |
USER |
– | ❌ No |
GUEST (via token) |
– | ❌ No |
Admin users see all projects; PM users see only those they're linked to via projects_users.
Rate-limiting prevents brute-force attempts on session validation.
This endpoint supports pagination and combined filters (e.g., project_id + status).