action #2816
Updated by ancorgs almost 10 years ago
GET operations (that is, reading) don't need an API key. See, for example https://openqa.opensuse.org/api/v1/jobs?iso=openSUSE-FTT-GNOME-Live-i686-Snapshot20140703-Media.iso allow users that are neither operators nor admins also to generate api keys. Nevertheless, Just to allow, e.g. quering the client tool always requires a valid API key for any operation. This should job settings to clone them to another system. api needs to be fixed in the client. extended with more fine grained access schecks then.