Forum Discussion

kavencai's avatar
kavencai
Contributor
10 years ago

what permission is needed to access those apis?

hi, guys   I try to access below apis, but I always get error like "User xxx does not have the following permission(s) at xxx: [ allow_manage_users ]", do you know what special permission setting n...
  • luk's avatar
    luk
    10 years ago

    Hi kavencai,

    no worries, I'm very new to Lith too...learning every day...

    A page that helped me a lot is http://community.lithium.com/t5/Developers-Knowledge-Base/FreeMarker-context-objects-and-directives/ta-p/9217

    basically restadmin() is the same as rest() to make custom REST API calls from FreeMarker templates with the difference that it acts like if you were an Administrator, e.g. it will return hidden forum boards (for normal users) etc., so be very careful where and when to use it! I just had one call that would completely bring down the whole site with error 500 for anonymous/not logged in users if I didn't use restadmin(), all other calls (and there are many) work with the normal rest() context object but not

    /users/id/<user_id>/roles

    so when I saw all your calls with /users/id/... this jumped to my mind immediately =)

luk's avatar
luk
Boss
10 years ago
Mmh, had that issue too and couldn't solve it, so I just used restadmin() instead of rest(), maybe that works for you too?
  • kavencai's avatar
    kavencai
    Contributor
    10 years ago
    hi, luk

    sorry, I'm a new guy and still learning Lithium, could you please give me more explanation, what is restadmin() and rest() you mean here? is it an api or something permission setting in the background?
    • luk's avatar
      luk
      Boss
      10 years ago

      Hi kavencai,

      no worries, I'm very new to Lith too...learning every day...

      A page that helped me a lot is http://community.lithium.com/t5/Developers-Knowledge-Base/FreeMarker-context-objects-and-directives/ta-p/9217

      basically restadmin() is the same as rest() to make custom REST API calls from FreeMarker templates with the difference that it acts like if you were an Administrator, e.g. it will return hidden forum boards (for normal users) etc., so be very careful where and when to use it! I just had one call that would completely bring down the whole site with error 500 for anonymous/not logged in users if I didn't use restadmin(), all other calls (and there are many) work with the normal rest() context object but not

      /users/id/<user_id>/roles

      so when I saw all your calls with /users/id/... this jumped to my mind immediately =)

      • kavencai's avatar
        kavencai
        Contributor
        10 years ago
        thanks, luk, I will have a try