I digged up some problems I am having with this module.

I have pointed out that one error seems to block the Lightroom plugin to work.

[Wed Jun 11 14:35:21 2014] [error] [client XX.XX.XX.XX] client denied by server configuration: /home/XX/domains/XX/public_html/lightroom

I can access the /lightroom with a browser and get the message Services Endpoint "lightroom" has been setup successfully.

But some request from Lightroom doesn't seems to work. I can create a new Collection without any problem. But I can't upload pictures to it, it gives me no error, and I can't modify it, it give me the error "Unable to update node." and put a client denied line in my Apache log.

I am still digging up this. But I wanted to share those informations with the community and see if someone stumbled across this.

Comments

memsis’s picture

memsis commented

Bump for updates.

So, working on the matter and found out that my hosting company will never allow PUT request.

Been on a walk over Google with that in mind and I found out that maybe it is a bad choice to use the PUT request type for your plugin. As I understand it, more and more hosting company will block those requests since they are a major security treath if not properly managed.

So, now I am trying to understand how t set up two targeted actions to allow updating nodes, uploading files and deleting nodes from lightroom.

If someone reads me, any help would be appreciated.

bartram’s picture

bartram commented
Status: Active » Closed (works as designed)

This module uses the REST format with the Services module. REST is a well defined and widely adopted methodology for communication between two systems. REST uses the PUT and DELETE HTTP methods to create and remove entities. These methods aren't security vulnerabilities in and of themselves. An insecure web server will be insecure. I'd argue that more and more web hosts are configured to handle these kinds of requests as REST becomes more popular. In fact, REST is in the core of Drupal 8.

I'd be happy to add a note about requiring support for these methods to the (admittedly limited) documentation for this module.