Re: [Handle-info] Modify handle value via API differs from via Handle Tool 2.0

[Robert R Tupelo-Schneck <schneck@cnri.reston.va.us>]

This is a bug.  In this case the HTTP API uses a different underlying handle API call than the Handle Tool.  And that call incorrectly requires the Add Admin permission.

As a workaround, you can give 1712/dladmins_test Add Admin permission... although you should note that Add Admin is functionally equivalent to "can do anything to this handle record".

We will ensure that this bug is fixed in the next version.  

Robert

> On Feb 17, 2016, at 1:57 PM, Brian Sheppard <brian.sheppard@wisc.edu> wrote:
> 
> I have a situation where a handle can modify another handle's value via the Handle Tool but not via the API.
> 
> Target handle’s relavent admin index:
> 
>    {
>      "index": 103,
>      "type": "HS_ADMIN",
>      "data”: 
>        {
>        "format": "admin",
>        "value": {
>          "handle": "1712/dladmins_test",
>          "index": 200,
>          "permissions": "110001110001"
>        }
>    }
> 
> Permissions:
> Add Value
> Remove Value
> Modify Value
> Read Value
> Create Handle
> List Handles
> 
> Target index:
> 
>    {
>      "index": 1,
>      "type": "URL",
>      "data": "http://ezproxy.library.wisc.edu/login?url=http://qqqq.com";,
>      "ttl": 86400,
>      "timestamp": "2016-02-17T18:30:40Z"
>    }
> 
> When I log in via the handle tool as 1712/handle_api — which belongs to the VLIST of 1712/dladmins_test —
> I can change the value of the index. But via the API, with the same credentials, I cannot. (Yet I *can* delete the index) 
> The response is an HTTP 403.
> 
> Using the same code, I *can* modify if using another handle’s enhanced credentials — one which belongs to a VLIST of an admin handle that has full permissions. Auth, in these cases, is via seckey if that matters.
> 
> 
> -Brian
> 
> —————————————————————————————
> Brian Sheppard
> UW Digital Collections Center
> brian.sheppard@wisc.edu
> 
> 
> 
> 
> 
> _______________________________________________
> Handle-Info mailing list
> Handle-Info@cnri.reston.va.us
> http://www.handle.net/mailman/listinfo/handle-info

_______________________________________________
Handle-Info mailing list
Handle-Info@cnri.reston.va.us
http://www.handle.net/mailman/listinfo/handle-info