Ajax API Permissions

[dlats]

The user has permissions of access CiviCRM and access AJAX API and I've added

function dog_reference_civicrm_alterAPIPermissions($entity, $action, &$params, &$permissions){
       
    if($entity == 'Dog'){
        $params['check_permissions'] = false;
    }
}

to a custom module.

When the user causes an Ajax call to a custom extension api get, he gets the error "API permission check failed for Dog/get call; insufficient permission: require administer CiviCRM".

This works ok for an admin user.

The call is CRM.api('Dog', 'get', {'sequential': 1, 'type': 'all', 'dog_name':cj("#type_dog_name").val()})

[dlats]

The site is using Drupal 7.29 and CiviCRM 4.4.5.

[xavier]

Is  dog_reference_civicrm_alterAPIPermissions ever called?

Instead of using check_permission (the check permission might be overrided later to force true?) , you should set the permission you want (access CiviCRM?)


function dog_reference_civicrm_alterAPIPermissions($entity, $action, &$params, &$permissions)
{
    $permissions['dog']['get'] = array('access CiviCRM');
    $permissions['dog']['delete'] = array('admininster CiviCRM');
    $permissions['dog']['create'] = array('add contacts');
//whatever.
}

[dlats]

I tried the following and cleared cache before each try;

$permissions['Dog']['get'] = array('access CiviCRM');

and

$permissions['Dog']['get'] = array();

I still get the same error "API permission check failed for Dog/get call; insufficient permission: require administer CiviCRM"

[dlats]

dog_reference_civicrm_alterAPIPermissions is called.

[xavier]

lowercase on the entity name here (dog eats Dog)

[dlats]

That was it. I ended up using $permissions['dog']['get'] = array('access AJAX API');