> ## Documentation Index > Fetch the complete documentation index at: https://docs.lerian.studio/llms.txt > Use this file to discover all available pages before exploring further. # Approve a user-delete request (checker) and execute the deletion > The CHECKER approves a pending request. The checker (token sub) MUST differ from the maker (four-eyes, 403 otherwise). On approval the Cabine API executes the deletion in Access Manager with a service credential, recording 'approved' ONLY on success; an execution failure records 'failed' (retryable) and returns 502. ## OpenAPI ````yaml /pt/openapi/v3-current/cabine.yaml post /v1/user-deletes/{userId}/approve openapi: 3.1.0 info: description: >- The Cabine API serves Lerian Cabine, the operators' console over Lerian's native rails. Use it to acknowledge alerts, hand off shifts, delete operator users with four-eyes approval, and decide Lerian SPI operations under manual review with four-eyes approval. title: Lerian Cabine API version: 1.0.0 servers: - url: https://api.example.com description: >- Replace the example host with the URL provided during environment onboarding. security: [] paths: /v1/user-deletes/{userId}/approve: post: tags: - UserDeleteFourEyes summary: Approve a user-delete request (checker) and execute the deletion description: >- The CHECKER approves a pending request. The checker (token sub) MUST differ from the maker (four-eyes, 403 otherwise). On approval the Cabine API executes the deletion in Access Manager with a service credential, recording 'approved' ONLY on success; an execution failure records 'failed' (retryable) and returns 502. operationId: approveUserDeleteRequest parameters: - description: >- Bearer JWT. Must be a normal-user principal: an application token is refused with 403, and any other token type is refused with 401 at the gate. The CHECKER identity is derived from THIS token; it MUST differ from the requester (four-eyes). in: header name: Authorization schema: description: >- Bearer JWT. Must be a normal-user principal: an application token is refused with 403, and any other token type is refused with 401 at the gate. The CHECKER identity is derived from THIS token; it MUST differ from the requester (four-eyes). type: string - description: The target user whose pending delete request is being decided. in: path name: userId required: true schema: description: The target user whose pending delete request is being decided. examples: - '42' type: string requestBody: content: application/json: schema: $ref: '#/components/schemas/DecisionBody' description: Optional decision note. responses: '200': content: application/json: schema: $ref: '#/components/schemas/DeleteRequestStateBody' description: OK '422': content: application/problem+json: schema: $ref: '#/components/schemas/Detail' description: Unprocessable Entity '500': content: application/problem+json: schema: $ref: '#/components/schemas/Detail' description: Internal Server Error default: content: application/problem+json: schema: $ref: '#/components/schemas/Detail' description: Error security: - BearerAuth: [] components: schemas: DecisionBody: additionalProperties: false properties: note: description: Optional decision reason (≤500 chars). type: string type: object DeleteRequestStateBody: additionalProperties: false properties: at: description: When the latest event was recorded (RFC 3339). format: date-time type: string note: description: Optional operator-authored reason. examples: - offboarding after a role change type: string operator: $ref: '#/components/schemas/DeleteOperatorBody' description: >- Server-extracted operator who recorded the latest event (the maker on 'requested'; the checker otherwise). state: description: >- Latest workflow action: 'requested' (pending a checker), 'approved' (deleted), 'rejected', or 'failed' (execution failed, retryable). enum: - requested - approved - rejected - failed examples: - requested type: string userId: description: The target user the workflow is about. examples: - '42' type: string required: - userId - state - operator - at type: object Detail: additionalProperties: false properties: code: description: >- Stable, machine-readable domain error code scoped to the emitting service (format: -NNNN). type: string correlationId: description: Request-scoped correlation identifier echoing X-Request-ID. examples: - req-7a3f9c2e type: string detail: description: >- A human-readable explanation specific to this occurrence of the problem. examples: - Property foo is required but is missing. type: string errors: description: Optional list of individual error details items: $ref: '#/components/schemas/ErrorDetail' type: - array - 'null' instance: description: >- A URI reference that identifies the specific occurrence of the problem. examples: - https://example.com/error-log/abc123 format: uri type: string status: description: HTTP status code examples: - 400 format: int64 type: integer title: description: >- A short, human-readable summary of the problem type. This value should not change between occurrences of the error. examples: - Bad Request type: string type: default: about:blank description: A URI reference to human-readable documentation for the error. examples: - https://example.com/errors/example format: uri type: string upstream: $ref: '#/components/schemas/Upstream' description: >- RFC 9457 extension member: the error a proxied third-party provider reported. Absent unless the emitting service explicitly surfaced one. required: - correlationId type: object DeleteOperatorBody: additionalProperties: false properties: owner: description: Operator org (the token's 'owner' claim), when present. examples: - acme type: string sub: description: Operator subject (the token's 'sub' claim, server-extracted). examples: - alice type: string required: - sub type: object ErrorDetail: additionalProperties: false properties: location: description: >- Where the error occurred, e.g. 'body.items[3].tags' or 'path.thing-id' type: string message: description: Error message text type: string value: description: The value at the given location type: object Upstream: additionalProperties: false properties: code: description: The upstream provider's own error code, verbatim. examples: - E4001 type: string message: description: >- The upstream provider's own error message, verbatim (bounded, never its raw response body). examples: - account not found at provider type: string type: object securitySchemes: BearerAuth: bearerFormat: JWT description: JWT bearer token issued by the identity provider. scheme: bearer type: http ```` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.