Hi, I'm having an issue while creating an item as a non admin user through REST API. I've added the user to collection submit, but am still getting ERROR org.dspace.rest.CollectionsResource @ User(fake_em...@example.com) has not permission to write collection! I was going through the code and it seems to me that the permissions asked are wrong, e.g. https://github.com/DSpace/DSpace/blob/master/dspace-rest/src/main/java/org/dspace/rest/CollectionsResource.java#L349 asks for Constants.WRITE on collection when it is adding an item, while according to https://wiki.duraspace.org/display/DSDOC5x/Functional+Overview#FunctionalOverview-Authorization it should be Constants.ADD. This is probably not the only issue as deleting a collection would require DELETE on the owning community object not the collection itself (https://github.com/DSpace/DSpace/blob/master/dspace-rest/src/main/java/org/dspace/rest/CollectionsResource.java#L506)
I hope I'm not the only one seeing this and hope that I'm reading the docs right, I was gonna test it on demo.dspace.org. But I couldn't log in. Can you spot any problems with the following cmd (i've ommited the real password)? curl -k -X POST -H "Content-Type: application/json" -d '{"email":"dspacedemo+ad...@gmail.com","password":"d....."}' https://demo.dspace.org/rest/login Regards, Ondrej -- You received this message because you are subscribed to the Google Groups "DSpace Technical Support" group. To unsubscribe from this group and stop receiving emails from it, send an email to dspace-tech+unsubscr...@googlegroups.com. To post to this group, send email to dspace-tech@googlegroups.com. Visit this group at https://groups.google.com/group/dspace-tech. For more options, visit https://groups.google.com/d/optout.