[Handle-info] Modify handle value via API differs from via Handle Tool 2.0

[Brian Sheppard <brian.sheppard@wisc.edu>]

I have a situation where a handle can modify another handle's value via the Handle Tool but not via the API.

Target handle’s relavent admin index:

    {
      "index": 103,
      "type": "HS_ADMIN",
      "data”: 
        {
        "format": "admin",
        "value": {
          "handle": "1712/dladmins_test",
          "index": 200,
          "permissions": "110001110001"
        }
    }

Permissions:
 Add Value
 Remove Value
 Modify Value
 Read Value
 Create Handle
 List Handles

Target index:

    {
      "index": 1,
      "type": "URL",
      "data": "http://ezproxy.library.wisc.edu/login?url=http://qqqq.com";,
      "ttl": 86400,
      "timestamp": "2016-02-17T18:30:40Z"
    }

When I log in via the handle tool as 1712/handle_api — which belongs to the VLIST of 1712/dladmins_test —
I can change the value of the index. But via the API, with the same credentials, I cannot. (Yet I *can* delete the index) 
The response is an HTTP 403.

Using the same code, I *can* modify if using another handle’s enhanced credentials — one which belongs to a VLIST of an admin handle that has full permissions. Auth, in these cases, is via seckey if that matters.


-Brian

—————————————————————————————
Brian Sheppard
UW Digital Collections Center
brian.sheppard@wisc.edu





_______________________________________________
Handle-Info mailing list
Handle-Info@cnri.reston.va.us
http://www.handle.net/mailman/listinfo/handle-info