Rights needed for update uservariables

[pigloox]

Hi,

I need to update a uservariable via the Json API for a user who has limited rights. How can I do that?

During my tests, I could do it only with a user with "admin" rights is this normal?

[pigloox]

no one knows how to update a variable without having the full rights ?

[pigloox]

Hello,

After more than a year with this problem, I would have liked to know if it had been considered a feature to update a variable via json for a non-admin user?

Thx

[waaren]

After more than a year with this problem, I would have liked to know if it had been considered a feature to update a variable via json for a non-admin user?

Looking at the source code (WebServer.cpp line 1922-)

Code: Select all

		void CWebServer::Cmd_UpdateUserVariable(WebEmSession & session, const request& req, Json::Value &root)
		{
			if (session.rights != 2)
			{
				session.reply_status = reply::forbidden;
				return; //Only admin user allowed
			}

So yes it is by design; but if you define the IP address of the caller in [setup] [settings] [system] Local Networks (no username/password):
you can update the uservariable.