Summary
The new directory:locationImages:edit permission will be automatically backfilled to all users who currently have the directory:locations:edit permission.
Effective Date
Monday, August 17, 2026
Details
A new endpoint, POST /api/v2/locations/images, has been introduced as the replacement for the legacy endpoint used to upload location images, which will be deprecated in the future.
To maintain consistent access controls, the new endpoint is protected by both the existing directory:locations:edit permission and the new directory:locationImages:edit permission.
To ensure existing users retain the ability to upload location images without interruption, the new permission will be automatically backfilled to all users who currently have the directory:locations:edit permission.
Customer Impact
No customer action is required.
This change introduces a new endpoint and a new permission. Users who currently have the directory:locations:edit permission will automatically receive the directory:locationImages:edit permission, ensuring uninterrupted access to location image uploads.
Impacted Resources
POST /api/v2/locations/images
Issue References
PLUS-1865
AUTHZ-1211
PLUS-2073
PLUS-2074
Contacts
@Ananya Singh @Anna Janica Please reply to this announcement with any questions. This helps the wider developer community benefit from the discussion. We encourage you to use this thread before contacting the designated person directly. Thank you for your understanding.