# Retrieve product access

`GET https://api.cademi.com.br/api/v3/users/{user_id}/products/{product_id}/access`

Operation ID: `users.products.access.get` · API v3

Retrieves the user's effective access to a product, including the sources that grant it (`sources[]`), the reason access is denied when applicable (`denial_reason`), and any overrides applied to the user (`overrides`).

The response includes an `ETag` representing the current revision. Send this value in the `If-Match` header when updating the product access to avoid overwriting a newer version.

Required permissions: `enrollments.read`.

## Parameters

| Name | In | Type | Required | Description |
|---|---|---|---|---|
| `user_id` | path | string | yes |  |
| `product_id` | path | string | yes |  |

## Responses

### 200

Returns the user's effective access to the product.

Body: `data`: ProductAccess.

Fields of ProductAccess:

| Field | Type | Required | Description |
|---|---|---|---|
| `denial_reason` | string or null, one of `no_access`, `hidden`, `opens_soon`, `opens_at`, `ended_at`, `exam_required`, `content_in_edit`, `insufficient_progress` | yes |  |
| `ends_at` | string or null (date-time) | yes |  |
| `has_access` | boolean | yes |  |
| `object` | string, one of `product_access` | yes |  |
| `overrides` | object | yes |  |
| `product_id` | string | yes |  |
| `revision` | string or null | yes |  |
| `sources` | array of object | yes |  |
| `starts_at` | string or null (date-time) | yes |  |
| `user_id` | string | yes |  |

### 401

The credential is missing, malformed, expired, or revoked.

Body: Error.

### 403

The current credentials do not have the permission required by this operation.

Body: Error.

### 404

The user or product was not found or is not accessible with the current credentials.

Body: Error.

Full schema: https://cademi.dev/openapi/v3.json