Actions
Feature #19301
closed
Let non admin users update their account via the REST API
Status:
Closed
Priority:
Normal
Assignee:
-
Category:
REST API
Target version:
-
Start date:
Due date:
% Done:
0%
Estimated time:
Resolution:
Fixed
Description
Using Redmine Java API library:
User user = rmf.getUserManager.getCurrentuser;
user.setFirstName("new name");
rmf.getUserManager.update(user);
Error: BadAuthentication.
I believe this is because Redmine requires authorization for "update user" action, which requires admin privileges.
What it should do instead is to check permissions basing on resources. In this example user should be able to change his/her own details.
Related issues
Updated by Jean-Philippe Lang almost 10 years ago
- Tracker changed from Defect to Feature
- Subject changed from Redmine API should authorize basing on resources, not actions to Let non admin users update their account via the REST API
Updated by Go MAEDA over 4 years ago
- Is duplicate of Patch #31399: make /my/account endpoint accessible through API added
Updated by Go MAEDA over 4 years ago
- Status changed from New to Closed
- Resolution set to Fixed
An API to allow a user to update their own account has been added in Redmine 4.1.0. See #31399 for details.
Actions