Forum Discussion

b_poplin's avatar
b_poplin
Expert
12 years ago
Solved

User-level API access to custom content

I can access custom content through API using an Admin role, but I get 303 permission denied with user-level role. API example: [server]/restapi/vc/categories/id/[categoryId]/settings/name/customcont...
  • AdamN's avatar
    AdamN
    12 years ago

    To get a setting value for a lower-level node such as a category, you'll want to use the REST API. If you're getting a permission denied error, try using the restadmin context object instead of the rest context object. That's the point I'd suggest being careful about. If you're just using a hard-coded REST API path, there shouldn't be any risk assuming you're ok with exposing the content of that setting for everyone. I'd discourage the use of user input to construct the path when using the restadmin context object (ie. query string parameter).

b_poplin's avatar
b_poplin
Expert
12 years ago

ENDPOINTS looks like it could be the right solution, but I need some more advice.

 

What I am trying to do:

I am trying to access a custom content setting on a category.

 

Try1: Fail (contentKey is custom content field name)

<#assign cc = settings.name.get('${contentKey}')/>

 

cc always returns custom content from Community level. 

 

Try2: Use rest call in Endpoint, same problem "permission denied" as using full external rest call.

 

Any idea how to get "settings.name.get('[customSetting]') to return a specific category level value?

 

Thanks again,

 

 

AdamN's avatar
AdamN
Khoros Oracle
12 years ago

To get a setting value for a lower-level node such as a category, you'll want to use the REST API. If you're getting a permission denied error, try using the restadmin context object instead of the rest context object. That's the point I'd suggest being careful about. If you're just using a hard-coded REST API path, there shouldn't be any risk assuming you're ok with exposing the content of that setting for everyone. I'd discourage the use of user input to construct the path when using the restadmin context object (ie. query string parameter).