# (NEW!) List Security Templates Available to Current User

Retrieve the security, rights, or access templates the authenticated user may act on — either templates the user can view, or templates that grant the user a specific permission. Returns only id and name, suited to populating a template picker for ingest, edit, or delete flows.

Business Rules:
- When permissionId is omitted, returns templates the user has view access to (resolved from the user's group membership).
- When permissionId is provided, returns only templates where at least one of the user's groups is granted that permission.
- Templates with no visible groups, and groups with no remaining permissions after filtering, are excluded.

Defaults:
- type defaults to security-template.
- limit defaults to 100.

The requesting user must be authenticated.

Endpoint: GET /security/templates/user
Version: 1.5
Security: ApiKeyAuth, BasicAuth

## Header parameters:

  - `X-API-Key` (string, required)
    Customer-specific API key required to invoke API.

  - `Authorization` (string, required)
    Provided by Authentication Token creation operation.

## Query parameters:

  - `permissionId` (string)
    Permission ID to check. When provided, only templates granting this permission to one of the user's groups are returned. When omitted, templates the user can view are returned.
    Example: "31bdde6b-1a2c-4d5e-8f90-1234567890ab"

  - `type` (string)
    Template classification to list. Defaults to security-template.
    Enum: "security-template", "rights-template", "access-template"

  - `limit` (integer)
    Number of results to return per page. Defaults to 100.
    Example: 100

  - `cursor` (string)
    Opaque cursor for pagination. Omit on the first request. Use the nextCursor value from the previous response for subsequent pages.

## Response 200 fields (application/json):

  - `templates` (array)

  - `templates.id` (string)
    Example: "a9380047-07d7-48aa-b4b7-474d00f0f428"

  - `templates.name` (string)
    Example: "Confidential"

  - `pageInfo` (object)

  - `pageInfo.hasNextPage` (boolean)

  - `pageInfo.nextCursor` (string,null)

## Response 400 fields (application/json):

  - `message` (string)

  - `detail` (string)

## Response 401 fields (application/json):

  - `message` (string)

  - `detail` (string)

## Response 403 fields (application/json):

  - `message` (string)

  - `detail` (string)