diff CHANGES.txt @ 5879:94a7669677ae

add permissions to control user of rest and xmlrpc API interfaces. issue2551058: Add new permissions: 'Rest Access' and 'Xmlrpc Access' to allow per-user access control to rest and xmlrpc interfaces using roles. Updated all schemas to add these new perms to all authenticated roles. Error conditions in handle_xmlrpc were not working right in manual testing. I tried to make it a little better, but I don't actually understand how the fault xmlrpc object is supposed to be used. So I may have messed something up. I'll try to ping the people who wrote the xmlrpc code to have them review.
author John Rouillard <rouilj@ieee.org>
date Fri, 27 Sep 2019 23:29:59 -0400
parents 1b57d8f3eb97
children 9938c40e03bc
line wrap: on
line diff
--- a/CHANGES.txt	Fri Sep 27 20:38:31 2019 -0400
+++ b/CHANGES.txt	Fri Sep 27 23:29:59 2019 -0400
@@ -91,7 +91,9 @@
 - issue2551061: Add rudimentary experimental support for JSON Web
   Tokens to allow delegation of limited access rights to third
   parties. See doc/rest.txt for details and intent. (John Rouillard)
- 
+- issue2551058: Add new permissions: 'Rest Access' and 'Xmlrpc Access'
+  to allow per-user access control to rest and xmlrpc interfaces using
+  roles.
 
 Fixed:
 

Roundup Issue Tracker: http://roundup-tracker.org/