Project

General

Profile

Actions
Copy link

Feature #19301

closed

Let non admin users update their account via the REST API

Added by Alex Last about 9 years ago. Updated almost 4 years ago.

Status:
Closed
Priority:
Normal
Assignee:
-
Category:
REST API
Target version:
-
Start date:
Due date:
% Done:

0%

Estimated time:
Resolution:
Fixed

Description

Using Redmine Java API library:

User user = rmf.getUserManager.getCurrentuser;
user.setFirstName("new name");
rmf.getUserManager.update(user);

Error: BadAuthentication.

I believe this is because Redmine requires authorization for "update user" action, which requires admin privileges.
What it should do instead is to check permissions basing on resources. In this example user should be able to change his/her own details.

Related issues

Is duplicate of Redmine - Patch #31399: make /my/account endpoint accessible through APIClosedGo MAEDA

Actions
Actions
Copy link

Also available in: Atom PDF