Uploaded image for project: 'Moodle app'
  1. Moodle app
  2. MOBILE-498 Push Notification for MoodleMobile
  3. MOBILE-490

Access keys created by API doesn't have permissions enabled

    XMLWordPrintable

    Details

    • Type: Sub-task
    • Status: Resolved
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: 1.3.3
    • Fix Version/s: 1.4
    • Component/s: Push notifications
    • Labels:
    • Affected Branches:
      MOODLE_13_STABLE
    • Fixed Branches:
      MOODLE_14_STABLE

      Description

      Hi,

      after creating an accesskey in Airnotifier using the API:

      curl -i -H "Accept: application/json" -H "X-AN-APP-NAME: moodle" -X POST -d "url=sitemoodleurl&siteid=12EFab765" http://localhost:8801/accesskeys/

      I have noticed that the key doesn't have any type of permissions enabled.

      I think that at least these permissions should be enabled by default:
      -Create token
      -Delete token
      -Notification

      Without these permissions Moodle sites that have created an Acces key using the API can't do anything

      It will be also interesting if the API supports also "description" and "contact email" as POST params, in the same way you can add this fields when you add a key manually. This will help us to display which API key belongs to which site and also a contact email for reporting abuse, etc...

        Attachments

          Activity

            People

            Assignee:
            dongsheng Dongsheng Cai
            Reporter:
            jleyva Juan Leyva
            Participants:
            Component watchers:
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:
              Fix Release Date:
              3/Mar/14