Welcome to the FogBugz Knowledge Exchange

Question

3

I need to be able to retrieve Wiki articles using the XML API and a token from a community user. The very same community user has access to this wiki via normal FB interface, so it seems strange that he or she cannot access the articles via XML API.

I know the history of that... quite a long time ago, to be exact on February 29th 2008, a security problem was found in FB6 with community users and the XML API - in consequence, the XML API access was disabled for community users (and the problem in general was addressed and fixed as well).

However, with the release of V7 and the updated API as well as the new plugin APIs, it's very inconvenient that one cannot access the XML API via a token of a community user, and I don't see a real reason for that.

flag	asked Feb 2 2010 at 17:15 Arsène von Wyss 1,355●3●9

	Can you provide a use case for what community users should be able to do over the API? – Rich Armstrong♦ Feb 4 2010 at 20:21
	Sure. We have an application and store the help pages in the FogBugz wiki. The application retrieves the help pages via XML API for further processing and rendering. We need to use a community user because this login is "shipped" with the application. – Arsène von Wyss Feb 4 2010 at 20:29
	I would very much like to have my Nagios installation create tickets using the API. Despite the fact that all I want to do is create tickets with specifically assigned users, I'm going to have to use a license, but a community user would do everything I wanted, except that it can't log in over the API. – Matt Simmons Apr 11 at 12:29

Michael Pryor · Answer 1 · 2010-02-02 23:49:38Z UTC

2

Only valid licensed users can use the XML API. We currently don't intend to change this behavior.

answered Feb 2 2010 at 23:49

Michael Pryor♦♦
3,122●2●9

1

If that is so, why is a community user allowed to log on using the XML API? And what is the rationale (today) not to allow XML API access? – Arsène von Wyss Feb 3 2010 at 6:53

Overcharged · Answer 2 · 2011-04-14 04:06:11Z UTC

0

Guess Joel needs some more bling. Do I really have to pay a full user license which increases upgrade costs among other things so I can add a bug progmatically when I could add the bug for free via other ways.

answered Apr 14 at 4:06

Overcharged
1

Using an admin user's logon token, you can create a case via the XML API and set the person who opened it to be another user, even a community or virtual user. – adambox♦ Sep 2 at 17:22

Bug: XML API lets community users log in, but returns “Not logged on” afterwards

2 Answers