Project

General

Profile

Actions

Defect #41282

open

Request to csv url should be an @api_request@

Added by Marco Descher 3 months ago.

Status:
New
Priority:
Normal
Assignee:
-
Category:
REST API
Target version:
-
Start date:
Due date:
% Done:

0%

Estimated time:
Resolution:
Affected version:

Description

We have an access filter plugin implemented in https://github.com/MEDEVIT/redmine_access_filters which differentiates
between web and api calls.

Now I do a call to the url /projects/myproct/issues.csv which directly returns a CSV file via the API.
Due to https://github.com/redmine/redmine/blob/52deba3abf4753777d189b379df3acec723c7bce/app/controllers/application_controller.rb#L715
csv endings are not classified as being api calls.

Is there a specific reason for this? In my opionen a direct call to both .json, .xml and .csv should be considered as api calls.

No data to display

Actions

Also available in: Atom PDF