Actions
Feature #19301
closed
Let non admin users update their account via the REST API
Status:
Closed
Priority:
Normal
Assignee:
-
Category:
REST API
Target version:
-
Start date:
Due date:
% Done:
0%
Estimated time:
Resolution:
Fixed
Description
Using Redmine Java API library:
User user = rmf.getUserManager.getCurrentuser;
user.setFirstName("new name");
rmf.getUserManager.update(user);
Error: BadAuthentication.
I believe this is because Redmine requires authorization for "update user" action, which requires admin privileges.
What it should do instead is to check permissions basing on resources. In this example user should be able to change his/her own details.
Related issues
Updated by 
Updated by
Actions