Errors when setting permissions via REST using new v3 endpoint... bug or user error?

I am getting errors using the new POST /api.ashx/v3/permissions endpoint.

Documentation: https://community.telligent.com/community/11/w/api-documentation/67092/set-permission-v3-rest-endpoint

Here is an example call...

The RoleID and GroupId have been triple checked, and I do get results when calling the GET /api.ashx/v3/permissions endpoint with these values.

The PermissionId "fd61ae45-30c5-4b04-92c4-9c6ec2fe1c90" is for "Read Group".

The result is the following message...

And the exception log provides this message...

The error indicates a missing value, but the only other documented parameter is ApplicationId, and the API still throws the same error even when a value is provided for that (along with an Application specific permissionID).

Any ideas?  Is this a bug, or a documentation error, or am I missing something?

Also... I noticed that there doesn't seem to be a Widget API equivalent to this API.  Is that something that is planned?

Thanks.

Parents Reply
  • -X POST is automatically implied when you use -d.

    The result with -X POST is the same, except that curl provides the following notice if you are verbose mode.

    "Note: Unnecessary use of -X or --request, POST is already inferred."

Children
  • Does the user making the request have the Manage Settings site permission?  Do they have access to read the group?

  • Yes, the user is in the OOTB Administrators Role, which does have the "Manage Site" permission.

  • There does appear the be an issue with the endpoint.  It's set to use query parameters instead of form data.  I've logged the below bug to fix this endpoint.  For a workaround, you'll need to pass the parameters as querystring parameters.

    ex:

    TE-15172: PermissionsV3 REST SetPermission Parameters Case Issue

  • > For a workaround, you'll need to pass the parameters as querystring parameters.

    Fantastic, I'll take it!

    What about making this functionality available in the Widget API?  Is that something that is planned, or maybe it just isn't documented?

    Thanks.

  • There is one, it just missing from documentation for some reason.  I'll add it to the bug notes.  It's core_v3_permission.