Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-29767

need to separate web service tokens issued for generic usage versus for development

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Open
    • Priority: Minor
    • Resolution: Unresolved
    • Affects Version/s: 2.1.2, Future Dev
    • Fix Version/s: DEV backlog
    • Component/s: Web Services
    • Labels:
    • Affected Branches:
      MOODLE_21_STABLE

      Description

      This is a follow on issue from MDL-29277 where I sort of realized this issue, after reading Eloy's premise. This could either be an improvement (to give out more information to the developer) or seen as a security issue (too much information going out to the normal user).

      There is the need for WS to provide at times very little information but localized ( to normal user) and at times a need to provide verbose development information which doesn't have to be localized ( to a developer trying to create something while utilizing the moodle web services).

      This can be reliably ascertained at the time of request. Therefore theres a need for distinction between web service tokens, which are used for requesting web services, to be further separately defined as belonging to a developer OR a user.

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              Unassigned Unassigned
              Reporter:
              nebgor Aparup Banerjee
              Participants:
              Component watchers:
              Juan Leyva, Amaia Anabitarte, Carlos Escobedo, Ferran Recio, Ilya Tregubov, Sara Arjona (@sarjona)
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Dates

                Created:
                Updated: