Permissions for API Key

[psla]

Hi,
what permissions for the API key are needed? I imagine stack.create/read/update and ... ? (library.read? timeline.read?)

[Majorfi]

Oh tricky one, I didn't notice the change in the API key.
I guess you can try with:

We are fetching the assets to know the one that exists, and then we are playing with the stacks (delete is also useful to remove empty stacks)
I will try to run some test next week to get the exact permissions required

[psla]

ERRO Error fetching current user: error response: 403 Forbidden - {"message":"Missing required permission: user.read","error":"Forbidden","statusCode":403...

Added user.read as well and now it seems to be doing something :)

ERRO Error modifying stack: error response: 400 Bad Request - {"message":"Not found or no asset.update access","error":"Bad Request","statusCode":400,"correl
ERRO Error modifying stack: error modifying stack: error response: 400 Bad Request - {"message":"Not found or no asset.update access","error":"Bad Request","
INFO --------------------------------

This error is weird -- "not found" or "no asset.update access". So... maybe it tries to use asset.update as well?

[justinbowes]

As I introspect the Go client library, I also see album management functions in the client that appear to be tested but not documented in the project features.

Is the following list of permissions complete?

• asset.{read, update, delete, view}
• stack.*
• user.read

[justinbowes]

Am running cron-style with the following perms:

• album.create,
• album.read,
• album.update,
• asset.read,
• asset.view,
• asset.update,
• asset.delete
• duplicate.read,
• duplicate.delete,
• stack.create,
• stack.read,
• stack.update,
• stack.delete,
• user.read

Not sure if this is the minimum set -- especially unsure whether the album perms are needed

[Majorfi]

Hi
For the main stacking use, these ones should be enough:

• user.read (Identify current user)
• asset.read (Search/fetch assets)
• stack.read (Fetch existing stacks)
• stack.create (Create stacks)
• stack.update (Modify stacks)
• stack.delete (Delete stacks, to reset, replace, remove single-asset)
• album.read (Resolve album name)

[PowerUser64]

Thanks! It might be worth having this in the documentation somewhere, since you're required to go through the list of options when you create an API key. Not sure where you would want it to go though.

[Majorfi]

Yes, I will update the docs today !

[PowerUser64]

I've gotta say, the documentation you've written for this project is some of the best on github. Hats off to ya, mate!