EPrints Technical Mailing List Archive

See the EPrints wiki for instructions on how to join this mailing list and related information.

Message: #06350

< Previous (by date) | Next (by date) > | < Previous (in thread) | Next (in thread) > | Messages - Most Recent First | Threads - Most Recent First

Re: [EP-tech] Question about REST API, review items under EPrint 3.3

The REST API docs indicate CRUD support (e.g. update a title). If I create a service account with a role that has update permissions would I be able to see them?  I definitely don't want to punch a hole through the security module.  When I reviewed the configuration changes in cfg.d/user_roles.pl I realized I had added REST paths to the public_roles definition.

    $c->{public_roles} = [qw{
        +eprint/archive/rest/get
        +subject/rest/get
    }]; 

If I add these properties to a more privileged role, say "editor", would that break the security module (I am assuming that it'll require authentication before performing the GET to retrieve the records)?

Thanks for the fast response, all the best,

Robert 



On Wed, Mar 15, 2017 at 10:12 AM, Alan.Stiles <alan.stiles@open.ac.uk> wrote:

Hi Robert,

I don’t believe the standard export functions have access to the review queue items by default.  It should be possible to amend them to allow this but that seems against the basic security model of the software.

Regards,

 

Alan

 

From: eprints-tech-bounces@ecs.soton.ac.uk [mailto:eprints-tech-bounces@ecs.soton.ac.uk] On Behalf Of rsdoiel@caltech.edu
Sent: 15 March 2017 16:29
To: eprints-tech@ecs.soton.ac.uk
Subject: [EP-tech] Question about REST API, review items under EPrint 3.3

 

I have a repository running under EPrints 3.3 where I have configured access to the REST API.  I am interested in using this API to access a list of EPrint records that are in the review queue so I can integrate some of that content with an external system.  My hunch is I have a configuration issue (I can read processed/public EPrint records fine but not those with a review status). Has anyone used the REST API to harvest the records that are under review?  Does the REST API support this?

 

All the best,

 

Robert

-- The Open University is incorporated by Royal Charter (RC 000391), an exempt charity in England & Wales and a charity registered in Scotland (SC 038302). The Open University is authorised and regulated by the Financial Conduct Authority.

*** Options: http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-tech
*** Archive: http://www.eprints.org/tech.php/
*** EPrints community wiki: http://wiki.eprints.org/
*** EPrints developers Forum: http://forum.eprints.org/