Admin rights required for changing variables???
Posted: Tuesday 15 October 2019 19:14
Hi,
As far as I have seen (also going by posts on this very forum) it is by design that only admins can change user variables (over the JSON API)... This is a serious risk if you want to - for instance - set one or more user variables using input from IFTTT, as you'll have to hard-code an admin-account in to the URL used...
What is the reasoning behind this restriction, and would it be possible to review this and make it a configurable item (similar to devices)?
As far as I have seen (also going by posts on this very forum) it is by design that only admins can change user variables (over the JSON API)... This is a serious risk if you want to - for instance - set one or more user variables using input from IFTTT, as you'll have to hard-code an admin-account in to the URL used...
What is the reasoning behind this restriction, and would it be possible to review this and make it a configurable item (similar to devices)?