Problem/Motivation

On a new project the client gave us an API client with just read permissions. This might sound not like a problem, but for example the subscriptions causes update requests to brightcove, which causes fatals if the permissions aren't there.

Proposed resolution

Provide a way to flag API clients in Drupal to be marked as read only and take that into account when deleting/updating videos and playlists

Remaining tasks

  • Determine/Discuss whether this is really a good idea
  • Determine the scope, aka. did we found all places code might want to update remote data

User interface changes

API changes

Data model changes

Support from Acquia helps fund testing for Drupal Acquia logo

Comments

dawehner created an issue. See original summary.

dawehner’s picture

Status: Active » Needs review
FileSize
4.08 KB
merauluka’s picture

FileSize
3.98 KB

Rerolled this patch against the latest copy of dev since the patch in #2 no longer applied cleanly.

IJsbrandy’s picture

Although you can set the readonly value manually a checkbox field is missing in the client api form to set the readonly value. This is now included in the patch.

yce’s picture

Hi,

For me it just seems like a workaround, the permission checks is not yet implemented in this module.

I would rather not add this read only functionality, instead the permission handling should be implemented.

yce’s picture

Status: Needs review » Needs work
yce’s picture

Priority: Normal » Minor