אפשרות לקבל היקף גרגירי עבור סייר הנתונים?

[jordan-violet]

האם יש דרך לתחום מפתח API כך שיוכל גם לקרוא ולכתוב עבור שאילתות של סייר הנתונים מבלי לתת מפתח API ניהולי בעל היקף גלובלי?

[pfaffman (Jay Pfaffman)]

מְחפֵשׂ הַמֵּדוּעַ לא יכול לכתוב כלום, לעולם.

אתה יכול ליצור שאילתה ולתת לחברי קבוצה שאינן יכולות באופן אחר לגשת להוסיף להריץ שאילתות מסוימות.

[jordan-violet]

סליחה, אולי זה היה לא כתוב טוב. האם שאילתות עצמן לא יכולות להיות נוצרות דרך ה-API?

זו הפונקציה הנדונה — קריאה וכתיבה של השאילתות בעצמן, לא בתוך שאילתה.

[pfaffman (Jay Pfaffman)]

או. סליחה. פספסתי את זה. אז אתה רוצה לְיַצֵּר שאילתות דרך ה־API, לא פשוט להריץ אותן. זה שונה.

אני חושב שהתשובה היא לא.

איזה בעיה יש לך שכתיבת שאילתות דרך ה־API תפתור? אתה צריך ליצור הרבה מהן או משהו כזה?

[jordan-violet]

You can create them via API, my question is if we can somehow limit the scope of an API key for that. Currently an API key scope can be limited to reading data explorer queries, but it doesn’t give an option to limit a scope to writing.

So today, if I want to give someone in my business the ability to write queries to data explorer, I have to give them a full global admin API key.

Here are the docs on creating queries via API:

Run Data Explorer queries with the Discourse API

This guide explains how to use the Discourse API to create, run, and manage queries with the Data Explorer plugin. Required user level: Administrator Virtually any action that can be performed through the Discourse user interface can also be triggered with the Discourse API. This document provides a comprehensive overview for utilizing the API specifically in conjunction with the Data Explorer plugin. For a general overview of how to find the correct API …

[pfaffman (Jay Pfaffman)]

@jordan-violet

I want to give someone in my business the ability to write queries

Ah. I see. You trust a particular human to write queries, but not anything else. I don’t think there’s a way to do that currently.

[tobiaseigen]

Sounds to me like what you are asking for, and which seems a good idea alot of communities would benefit from, is a setting like data_explorer_allowed_groups which lets you provide full access to data explorer to more groups in addition to admins.

Presumably then if the group is allowed access, then the API key of that user would work to create queries as well as access them.

Currently it’s only possible to let people access existing queries, via their groups page.

I’ve moved this to Feature so the feature request can be considered. Not sure it will be picked up but this at least puts the idea out there.

[pfaffman (Jay Pfaffman)]

@tobiaseigen

Sounds to me like what you are asking for, and which seems a good idea a lot of communities would benefit from, is a setting like data_explorer_allowed_groups which lets you provide full access to data explorer to more groups in addition to admins.

The reason not to do that is that it gives those people full (though read-only) access to everything in the database–passwords, IP addresses (which moderators have), all of the secrets in SiteSettings, and probably some other stuff. OTOH, it is read-only, so it’s not the SAME as being an admin. Oh, also, the secrets needed to log in as someone else if you have a login link sent.