Admin rights required for changing variables?
Posted: Monday 24 June 2019 18:00
Hi,
As far as I have seen (also going by posts on this very forum) it is by design that only admins can change user variables (over the JSON API)... This is a serious risk if you want to - for instance - set one or more user variables using input from IFTTT, as you'll have to hard-code an admin-account in to the URL used...
What is the reasoning behind this restriction, and would it be possible to review this and make it a configurable item (similar to devices)?
As far as I have seen (also going by posts on this very forum) it is by design that only admins can change user variables (over the JSON API)... This is a serious risk if you want to - for instance - set one or more user variables using input from IFTTT, as you'll have to hard-code an admin-account in to the URL used...
What is the reasoning behind this restriction, and would it be possible to review this and make it a configurable item (similar to devices)?