Open API permission - Bughancement

Kristi Miles

October 25, 2024 20:05 Edited

Moving this for Duncan Hilliard 

• Where did you find this (NA/CA/EU/AP/Demo)? NA Prod
• What tenant did you see this on? State Farm Arena
• Is this a converted account? Yes
• Did the client report this issue? No
• Are you able to reproduce this on demo or staging? Yes - Duncan Demo
• What's the problem? When setting up access to the API there is an option for Write Access. State Farm Arena has only subscribed to a View Only version. Even if we uncheck the option the client can go in and click it back on
• What are the steps to reproduce this? Go to System Admin, API, Click to add Open API credentials
• Link to Zendesk ticket:

 

Adding in the ProductBoard note for this since its a known issue:
https://momentus.productboard.com/insights/notes/view/1336-all-notes/features/10217484/insights
 

• 

  Kristi Miles

  October 25, 2024 20:06

  Elizabeth Fox  / @...  / @... 
• 

  Brian Chia

  October 25, 2024 20:19

  Thanks, Kristi. I will need to check with Engineering to see what the intention behind this design was. My guess is that we never explicitly defined read vs write API access. I don't believe we've been selling different API tiers so maybe this is just a legacy arrangement. 
• 

  Kristi Miles

  October 28, 2024 19:03 Edited

  @... we have been selling this as a tiered system. That's what sparked Duncan's question for State Farm Arena. 
  
  I've also had it come up for Pittsburgh Cultural Trust last year in September.

Please sign in to leave a comment.