CiviCRM Community Forums (archive)

*

News:

Have a question about CiviCRM?
Get it answered quickly at the new
CiviCRM Stack Exchange Q+A site
This forum was archived on 25 November 2017. Learn more.
How to get involved.
What to do if you think you've found a bug.



  • CiviCRM Community Forums (archive) »
  • Old sections (read-only, deprecated) »
  • Developer Discussion (Moderator: Donald Lobo) »
  • API Access without logging in backend
Pages: 1 [2]

Author Topic: API Access without logging in backend  (Read 11737 times)

bstalcup

  • I post occasionally
  • **
  • Posts: 47
  • Karma: 1
  • CiviCRM version: 4.7.3
  • CMS version: Joomla!
  • MySQL version: 5.5.36-cll-lve
  • PHP version: 5.3.29
Re: API Access without logging in backend
June 28, 2013, 08:31:39 am
I was not giving the API_KEY to several users, only a few who are authorized.  But I was wondering if this authentication could be done on the front end of Joomla. 

sonicthoughts

  • Ask me questions
  • ****
  • Posts: 498
  • Karma: 10
Re: API Access without logging in backend
June 28, 2013, 01:00:15 pm
Quote
getquick was a workaround, specifically to be automatically whitelisted to be accessible over http get. You can use it. But why aren't you using the normal contact.get api instead?
Ahh...perhaps I'm just trying to take a shortcut but doing data clense and may have a Name or email or other bit of info and want to easily see if there is a match in the civi.  email, in particular, is tricky as there could be multiple emails listed under Home or Other.  Thought this would be a simple way, like in UI to do a lookup but dealing with API idiosyncrasies has taken me on a long detour.  I have seen both getquick and quicksearch action and I believe the code for AJAX and Rest are a bit different. Will probably abandon course :)

xavier

  • Forum Godess / God
  • I’m (like) Lobo ;)
  • *****
  • Posts: 4453
  • Karma: 161
    • Tech To The People
  • CiviCRM version: yes probably
  • CMS version: drupal
Re: API Access without logging in backend
June 28, 2013, 03:56:46 pm
Hey,

You should try using the standard contact.get before going to the less travelled road, not sure I understand you context but should be enough

X+
-Hackathon and data journalism about the European parliament 24-26 jan. Watch out the result

bstalcup

  • I post occasionally
  • **
  • Posts: 47
  • Karma: 1
  • CiviCRM version: 4.7.3
  • CMS version: Joomla!
  • MySQL version: 5.5.36-cll-lve
  • PHP version: 5.3.29
Re: API Access without logging in backend
July 16, 2013, 11:40:14 am
Hey,

Something that concerns me about this is that front-end only users who have permission to access the ajax API (for an extension or something like that) cannot do so, because they do not have back-end access in Joomla!  I don't know if this is a problem in Drupal, but it is something that should definitely be looked at.

Thanks.

xavier

  • Forum Godess / God
  • I’m (like) Lobo ;)
  • *****
  • Posts: 4453
  • Karma: 161
    • Tech To The People
  • CiviCRM version: yes probably
  • CMS version: drupal
Re: API Access without logging in backend
July 16, 2013, 02:31:44 pm
Hey,

In drupal, there isn't that distinction between front and backend.

It would be great if someone knowing joomla well could contribute the needed so the features work as expected on joomla.

X+
-Hackathon and data journalism about the European parliament 24-26 jan. Watch out the result

bstalcup

  • I post occasionally
  • **
  • Posts: 47
  • Karma: 1
  • CiviCRM version: 4.7.3
  • CMS version: Joomla!
  • MySQL version: 5.5.36-cll-lve
  • PHP version: 5.3.29
Re: API Access without logging in backend
July 26, 2013, 06:46:08 am
Hey,

Something that worries me is that perhaps ALL CMS-based permissions for CiviCRM on Joomla are not working on the frontend (not just ajax API access).  Granted, most permissions only matter for people with administrator access anyway.  How might I get in touch with someone to let them know that this problem exists.  Lobo suggested that we post a blog, yet after hours of searching I can't seem to find just how to do that.

Thanks.

Donald Lobo

  • Administrator
  • I’m (like) Lobo ;)
  • *****
  • Posts: 15963
  • Karma: 470
    • CiviCRM site
  • CiviCRM version: 4.2+
  • CMS version: Drupal 7, Joomla 2.5+
  • MySQL version: 5.5.x
  • PHP version: 5.4.x
Re: API Access without logging in backend
July 26, 2013, 06:56:17 am

sorry, have been on a summer break and travelling

i've given you blogging privileges to blog about the mobile work u'll have done at ND

note that joomla and wordpress have separated the "backend" and "frontend" from a design / programming perspective. Civi primarily operates in the backend for both those CMS'es

As such permissions do not apply on the frontend for most Civi functionality (since it is not exposed to the frontend)

If folks would like to change this assumption, we'd encourage them to talk with other developers also doing development with Civi on that CMS and decide the best way to approach this going forward

lobo
A new CiviCRM Q&A resource needs YOUR help to get started. Visit our StackExchange proposed site, sign up and vote on 5 questions
Pages: 1 [2]
  • CiviCRM Community Forums (archive) »
  • Old sections (read-only, deprecated) »
  • Developer Discussion (Moderator: Donald Lobo) »
  • API Access without logging in backend

This forum was archived on 2017-11-26.