Forum Discussion

kavencai's avatar
kavencai
Contributor
10 years ago

what permission is needed to access those apis?

hi, guys   I try to access below apis, but I always get error like "User xxx does not have the following permission(s) at xxx: [ allow_manage_users ]", do you know what special permission setting n...
  • luk's avatar
    luk
    10 years ago

    Hi kavencai,

    no worries, I'm very new to Lith too...learning every day...

    A page that helped me a lot is http://community.lithium.com/t5/Developers-Knowledge-Base/FreeMarker-context-objects-and-directives/ta-p/9217

    basically restadmin() is the same as rest() to make custom REST API calls from FreeMarker templates with the difference that it acts like if you were an Administrator, e.g. it will return hidden forum boards (for normal users) etc., so be very careful where and when to use it! I just had one call that would completely bring down the whole site with error 500 for anonymous/not logged in users if I didn't use restadmin(), all other calls (and there are many) work with the normal rest() context object but not

    /users/id/<user_id>/roles

    so when I saw all your calls with /users/id/... this jumped to my mind immediately =)

luk's avatar
luk
Boss
Mmh, had that issue too and couldn't solve it, so I just used restadmin() instead of rest(), maybe that works for you too?
kavencai's avatar
kavencai
Contributor
10 years ago
hi, luk

sorry, I'm a new guy and still learning Lithium, could you please give me more explanation, what is restadmin() and rest() you mean here? is it an api or something permission setting in the background?
  • luk's avatar
    luk
    Boss
    10 years ago

    Hi kavencai,

    no worries, I'm very new to Lith too...learning every day...

    A page that helped me a lot is http://community.lithium.com/t5/Developers-Knowledge-Base/FreeMarker-context-objects-and-directives/ta-p/9217

    basically restadmin() is the same as rest() to make custom REST API calls from FreeMarker templates with the difference that it acts like if you were an Administrator, e.g. it will return hidden forum boards (for normal users) etc., so be very careful where and when to use it! I just had one call that would completely bring down the whole site with error 500 for anonymous/not logged in users if I didn't use restadmin(), all other calls (and there are many) work with the normal rest() context object but not

    /users/id/<user_id>/roles

    so when I saw all your calls with /users/id/... this jumped to my mind immediately =)

    • kavencai's avatar
      kavencai
      Contributor
      10 years ago
      thanks, luk, I will have a try