Hi,
I'm having a problem with the JS API. I can create an asset with the API no problem and set attributes and metadata and also trash the asset without actually being logged into Matrix. I do this by setting ignore permissions to yes in the API asset. However, in order to set the status of the assets I create as live to be displayed on our site, I have to be logged into matrix otherwise the API returns an error {"error":"You do not have permissions to access this change status for this asset"}.
Is this correct behaviour?
Surely the ignore permissions setting should allow me to change the status via the API too without being logged in.
Many thanks.
Hi Paul,
I believe the ignore permissions check is only intended for asset creation. The comment states "If this option is set to yes, permissions will not be checked when creating assets.". You could potentially get around this by applying public write permission, but that has security implications (as does the ignore permissions setting itself).
[quote]
Hi Paul,
I believe the ignore permissions check is only intended for asset creation. The comment states "If this option is set to yes, permissions will not be checked when creating assets.". You could potentially get around this by applying public write permission, but that has security implications (as does the ignore permissions setting itself).
[/quote]
Yes, the ignore permissions option was added to mirror the ignore permissions option that an asset builder has. Which is only used for creating of assets.