GenericTicketConnectorREST - "ErrorCode":"TicketGet.AccessDenied"

Moderator: crythias

Post Reply
gecelann
Znuny expert
Posts: 164
Joined: 12 Feb 2016, 08:05
Znuny Version: 5.0.0
Real Name: ann
Company: rghdinc

GenericTicketConnectorREST - "ErrorCode":"TicketGet.AccessDenied"

Post by gecelann »

Hi,

I would like to know if it is possible to view ticket's JSON tags even if the user that you used is not the one who created the ticket?
Actually GenericTicketConnectorREST is giving me the right JSON tags the thing is I am not able to view other ticket's details if I'm not the one who created the ticket. Could anyone help me how can I get the ticket without having the userlogin and password? or other way around?

Code: Select all

 http://localhost/otrs/nph-genericinterface.pl/Webservice/GenericTicketConnectorREST/Ticket/27?Password=pass&DynamicFields=0&UserLogin=user&AllArticles=0
reneeb
Znuny guru
Posts: 5018
Joined: 13 Mar 2011, 09:54
Znuny Version: 6.0.x
Real Name: Renée Bäcker
Company: Perl-Services.de
Contact:

Re: GenericTicketConnectorREST - "ErrorCode":"TicketGet.AccessDenied"

Post by reneeb »

You need the credentials for a user who has the permission to see the ticket. The webservice does the same permission checks as the web interface.

If anyone should see the ticket details, you would need to write your own operation modules for the Generic Interface. But I would *not* do that as that means that anyone can see any ticket (information leaks).
Perl / Znuny development: http://perl-services.de
Free Znuny add ons from the community: http://opar.perl-services.de
Commercial add ons: http://feature-addons.de
gecelann
Znuny expert
Posts: 164
Joined: 12 Feb 2016, 08:05
Znuny Version: 5.0.0
Real Name: ann
Company: rghdinc

Re: GenericTicketConnectorREST - "ErrorCode":"TicketGet.AccessDenied"

Post by gecelann »

reneeb wrote:You need the credentials for a user who has the permission to see the ticket. The webservice does the same permission checks as the web interface.

If anyone should see the ticket details, you would need to write your own operation modules for the Generic Interface. But I would *not* do that as that means that anyone can see any ticket (information leaks).
Hi reneeb!
Thank you so much!

However, using this https://github.com/OTRS/otrs/blob/maste ... Request.pl
is it possible to integrate it with PHP? I'm not familiar with perl programming.
reneeb
Znuny guru
Posts: 5018
Joined: 13 Mar 2011, 09:54
Znuny Version: 6.0.x
Real Name: Renée Bäcker
Company: Perl-Services.de
Contact:

Re: GenericTicketConnectorREST - "ErrorCode":"TicketGet.AccessDenied"

Post by reneeb »

Sure, the GenericInterface can be called from every programming language that supports SOAP and/or HTTP requests. Most PHP code use the GenericInterface with SOAP, but it should be simple to use the REST interface from PHP.
Perl / Znuny development: http://perl-services.de
Free Znuny add ons from the community: http://opar.perl-services.de
Commercial add ons: http://feature-addons.de
gecelann
Znuny expert
Posts: 164
Joined: 12 Feb 2016, 08:05
Znuny Version: 5.0.0
Real Name: ann
Company: rghdinc

Re: GenericTicketConnectorREST - "ErrorCode":"TicketGet.AccessDenied"

Post by gecelann »

reneeb wrote:Sure, the GenericInterface can be called from every programming language that supports SOAP and/or HTTP requests. Most PHP code use the GenericInterface with SOAP, but it should be simple to use the REST interface from PHP.
Hi reneeb!
Thank you, my co-worker would like to use REST because of JSON tags. will work for it.
Thank you so much!! :D :D :D
Post Reply