runAs on REST API with Api User - EspoCRM Open Source Community Forum

If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

X

hi-ko

Member

Join Date: May 2015

Posts: 90
Share

Tweet
#1

runAs on REST API with Api User

10-16-2019, 04:02 PM

I'm pretty aware about the Espo REST API and the api user. We integrated EspoCRM into our enterprise integration tier which uses an espo admin user to read and write data.
Given that we also have implemented a unified user/SSO concept we need to restrict data access for a specific end user (sso speak: REMOTE_USER) since the api user has admin permissions and we want/need to respect the permissions defined in espo for that end user.
Is there any concept we can use to run a REST api call with runAs remote_user permissions sending the remote_user in the request?
Tags: None
yuri

Member

Join Date: Mar 2014

Posts: 8467
Share

Tweet
#2

10-16-2019, 07:12 PM

API User don't have admin permissions. They do have roles as regular users.

If you find EspoCRM good, we would greatly appreciate if you could give the project a star on GitHub. We believe our work truly deserves more recognition. Thanks.
Comment
hi-ko

Member

Join Date: May 2015

Posts: 90
Share

Tweet
#3

10-16-2019, 10:32 PM

Hi Yuri,
thanks for your feedback. Concerning our main intention: Is there any concept we can use to run a REST api call with runAs user?
Comment
yuri

Member

Join Date: Mar 2014

Posts: 8467
Share

Tweet
#4

10-17-2019, 11:34 AM

There is no such an ability.

If you find EspoCRM good, we would greatly appreciate if you could give the project a star on GitHub. We believe our work truly deserves more recognition. Thanks.
Comment

Previous template Next

Working...