Question about Authorisation

posted by h-e-n-r-y
Posted on Thursday December 4, 2008 at 11:20. 347 visits. ( permalink )
I have written an app that allows continuous zooming of an image using the best matching thumb (or original) of the underlying image.

hagebuttenweg4.de/ipernity/onblack.pl?doc_id=2876983

To get the original size of the image my app must be authorized to read private data of the user.

This is imho not necessary because everyone who is logged in can see anothers original size images, even though access to private data is not granted.

Do I misunderstand something or do we need another level of Authorisation / granting of rights in the API?

h-e-n-r-y

This topic has been edited by h-e-n-r-y 12 months ago.

8 Replies

A Tristan says:
Without any permissions, your application can access only public documents.

Read permission grants your application read access to all public and private documents.
Posted 12 months ago. ( permalink )
h-e-n-r-y pro replies:
Yes but with an unsigned call to doc.get I do not get the original image of public documents. Is this right? Can I do a signed call without requesting permissions?
Posted 12 months ago. ( permalink )
A Tristan replies:
You can set your preference here: www.ipernity.com/pref/original as explained here www.ipernity.com/help/faq/share#286
Some rules apply like : www.ipernity.com/help/faq/doc#5
For now, as on the website, you have to be authenticated to get access to the original.
Posted 12 months ago. ( permalink )
ِِِ says:
as i know, you must request read permission
Posted 12 months ago. ( permalink / translate )
h-e-n-r-y pro replies:
That was my impression too, but the users are afraid of granting access to private docs too, which is not necessary for my app. I need only read-access to public docs. Like in non-anonymous mode.
Posted 12 months ago. ( permalink )
ِِِ replies:
yes, I face the same problem with IperLabs.
But if people do not trust, then; they can't use the application ! they don't have another choice

BTW, fantastic onBlack :)
Posted 12 months ago. ( permalink )
h-e-n-r-y pro replies:
Thanks.
What I missed was also a mechanism to fallback to my app, when the user does not grant the rights. So that I can serve a downstripped version in that case. But once the user is trapped on the "login and grant rights" page there is no way back.
Posted 12 months ago. ( permalink )
Doomshammer replies:
I don't think that's something the API should provide. That is something you need to catch in your App. e. g.:

my $url = defined($api->{photo}->{original})?$api->{photo}->{original}:$api->{photo}->{small};

S. th. like that. If the original size URL is not avail. it will fallback to the small avail. URL.
Posted 12 months ago. ( permalink )

You must be logged on to post a reply. Sign in now?


rss Latest comments – Subscribe to the comment feed for this topic.

 

Català | Čeština nové | 中文 | Deutsch | English | Español | Esperanto | Ελληνικά | Français | Galego | Italiano | Nederlands | Português | More...