#1088 - Commandr-fs REST API (phase 2)

By Chris Graham
Added 17th Mar 2013, 9:48 AM
1 view

Identifier	#1088
Issue type	Feature request or suggestion
Title	Commandr-fs REST API (phase 2)
Status	Open
Tags	Type: Mobile (custom)
Handling member	Deleted
Addon	commandr
Description	Extend the Commandr-fs REST API to be able to do authentication for any Composr user, or accessible as guest, and automatically apply permissions accordingly.
Steps to reproduce
Additional information	For this to work, Commandr-fs hooks need to known about permissions. Phase 1 is useful because it allows integration between apps, but phase 2 opens up a wider variety of consumer-side functionality.
Funded?	No

The system will post a comment when this issue is modified (e.g., status changes). To be notified of this, click "Enable comment notifications".

Rating

Unrated

Comments

By Guest posted 9th Dec 2015, 5:54 PM

Quick note that if we do this we need to be extremely careful about file permissions. Right now it lets you save stuff to any file path if a resource supports associated files, so you can e.g. save out PHP files using this.

By Guest posted 9th Dec 2015, 7:46 PM

Before this is implemented, it is reasonable to just write custom code to implement whatever permissions a particular (e.g. mobile) project needs. So phase 1 gets us to a place that is usable by developers, and phase 2 is a niceity to clean things up more.