Hi,
I'm having an issue while creating an item as a non admin user through REST
API.
I've added the user to collection submit, but am still getting ERROR
org.dspace.rest.CollectionsResource @ User(fake_em...@example.com) has not
permission to write collection!
I was going through the code and it seems to me that the permissions asked
are wrong, e.g.
https://github.com/DSpace/DSpace/blob/master/dspace-rest/src/main/java/org/dspace/rest/CollectionsResource.java#L349
asks
for Constants.WRITE on collection when it is adding an item, while
according
to
https://wiki.duraspace.org/display/DSDOC5x/Functional+Overview#FunctionalOverview-Authorization
it should be Constants.ADD. This is probably not the only issue as deleting
a collection would require DELETE on the owning community object not the
collection itself
(https://github.com/DSpace/DSpace/blob/master/dspace-rest/src/main/java/org/dspace/rest/CollectionsResource.java#L506)
I hope I'm not the only one seeing this and hope that I'm reading the docs
right, I was gonna test it on demo.dspace.org. But I couldn't log in. Can
you spot any problems with the following cmd (i've ommited the real
password)?
curl -k -X POST -H "Content-Type: application/json" -d
'{"email":"dspacedemo+ad...@gmail.com","password":"d....."}'
https://demo.dspace.org/rest/login
Regards,
Ondrej
--
You received this message because you are subscribed to the Google Groups
"DSpace Technical Support" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to dspace-tech+unsubscr...@googlegroups.com.
To post to this group, send email to dspace-tech@googlegroups.com.
Visit this group at https://groups.google.com/group/dspace-tech.
For more options, visit https://groups.google.com/d/optout.
