Re: User Account Management through REST API
On Tue, Jun 29, 2010 at 10:35 AM, David Solbach d...@vidsolbach.de wrote: Hi there, is it possible to create / delete / modify users using the REST API in 1.5? I found a call to list all users, but nothing more in the documentation, yet. Is there a list of undocumented API calls somewhere? Zitat von Christian Hammond chip...@chipx86.com: Hi David, There aren't any calls for this today. The only way to programatically do this is by issuing HTTP POSTs to the proper page in the admin UI. It's something we could possibly add in a future release, but won't happen for 1.5. Technically, all the new APIs in 1.5 are undocumented, in that we have a new resource tree that I'm still writing docs for. What are your needs for a RESTful user administration API? Hi Christian, in my understanding, we evaluate the possibility to create uuser accounts in one application (say redmine) and automatically create a user with the same credentials in another application on another server (revieboard). Therefore I guess we would need the possibility to Create/Delete and Modify users in Reviewboard via a RESTful API. Although I think that deleting is not an easy use case, since RB will delete all DB Items created by that user as well, right? David -- Want to help the Review Board project? Donate today at http://www.reviewboard.org/donate/ Happy user? Let us know at http://www.reviewboard.org/users/ -~--~~~~--~~--~--~--- To unsubscribe from this group, send email to reviewboard+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/reviewboard?hl=en
Re: User Account Management through REST API
On Wed, Jun 30, 2010 at 1:45 AM, David Solbach d...@vidsolbach.de wrote: On Tue, Jun 29, 2010 at 10:35 AM, David Solbach d...@vidsolbach.de wrote: Hi there, is it possible to create / delete / modify users using the REST API in 1.5? I found a call to list all users, but nothing more in the documentation, yet. Is there a list of undocumented API calls somewhere? Zitat von Christian Hammond chip...@chipx86.com: Hi David, There aren't any calls for this today. The only way to programatically do this is by issuing HTTP POSTs to the proper page in the admin UI. It's something we could possibly add in a future release, but won't happen for 1.5. Technically, all the new APIs in 1.5 are undocumented, in that we have a new resource tree that I'm still writing docs for. What are your needs for a RESTful user administration API? Hi Christian, in my understanding, we evaluate the possibility to create uuser accounts in one application (say redmine) and automatically create a user with the same credentials in another application on another server (revieboard). Therefore I guess we would need the possibility to Create/Delete and Modify users in Reviewboard via a RESTful API. Although I think that deleting is not an easy use case, since RB will delete all DB Items created by that user as well, right? David Right. It's best never to delete a user in Review Board. Marking them as inactive is fine, though. I know what other people have done is written custom auth backends to talk to a central database for users, so instead of creating/updating users in Review Board based on redmine's data, you'd just have Review Board use redmine for authentication in some way. I'm not familiar enough with redmine, but if it could use something like LDAP for authentication, that'd be even easier. Christian -- Christian Hammond - chip...@chipx86.com Review Board - http://www.reviewboard.org VMware, Inc. - http://www.vmware.com -- Want to help the Review Board project? Donate today at http://www.reviewboard.org/donate/ Happy user? Let us know at http://www.reviewboard.org/users/ -~--~~~~--~~--~--~--- To unsubscribe from this group, send email to reviewboard+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/reviewboard?hl=en
Re: User Account Management through REST API
On Wed, Jun 30, 2010 at 11:19, Christian Hammond chip...@chipx86.com wrote: I know what other people have done is written custom auth backends to talk to a central database for users, so instead of creating/updating users in Review Board based on redmine's data, you'd just have Review Board use redmine for authentication in some way. I'm not familiar enough with redmine, but if it could use something like LDAP for authentication, that'd be even easier. Redmine does support LDAP as a backend and adding a custom authentication backend to Redmine is also trivial (just implement an AuthSource - takes less than 40 lines of code for simple DB-based authentication). What I could consider somewhat problematic with these custom auth backends in both Review Board and Redmine is the pull approach that is implemented by them: The user account data is only pulled from the backend when an account is used for the first time, so you cannot add somebody as a reviewer before he has signed on at least once. Regards, Thilo -- Want to help the Review Board project? Donate today at http://www.reviewboard.org/donate/ Happy user? Let us know at http://www.reviewboard.org/users/ -~--~~~~--~~--~--~--- To unsubscribe from this group, send email to reviewboard+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/reviewboard?hl=en
Re: User Account Management through REST API
On Wednesday, June 30, 2010, Thilo-Alexander Ginkel th...@ginkel.com wrote: Redmine does support LDAP as a backend and adding a custom authentication backend to Redmine is also trivial (just implement an AuthSource - takes less than 40 lines of code for simple DB-based authentication). What I could consider somewhat problematic with these custom auth backends in both Review Board and Redmine is the pull approach that is implemented by them: The user account data is only pulled from the backend when an account is used for the first time, so you cannot add somebody as a reviewer before he has signed on at least once. Regards, Thilo You actually can add a user in LDAP who is not in Review Board as a reviewer. They won't appear in the autocomplete, but if you type the name it will work. Review Board checks the auth backend for any unrecognized names that are entered and pulls them down then. Going the LDAP route solves the password issue too. How would you set/change passwords using the REST method? You're unlikely to get password data from redmine (I would expect). Christian -- -- Christian Hammond - chip...@chipx86.com Review Board - http://www.reviewboard.org VMware, Inc. - http://www.vmware.com -- Want to help the Review Board project? Donate today at http://www.reviewboard.org/donate/ Happy user? Let us know at http://www.reviewboard.org/users/ -~--~~~~--~~--~--~--- To unsubscribe from this group, send email to reviewboard+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/reviewboard?hl=en
Fwd: User Account Management through REST API
Forwarding due to delivery failure... -- Forwarded message -- From: Eike Hein h...@kde.org Date: Wed, Jun 30, 2010 at 9:40 PM Subject: Re: User Account Management through REST API To: reviewboard@googlegroups.com Cc: sysad...@kde.org On 6/30/2010 11:19 AM, Christian Hammond wrote: Right. It's best never to delete a user in Review Board. Marking them as inactive is fine, though. That's fine, actually: Deleting users is not allowed in Redmine, only disabling them. -- Best regards, Eike Hein -- Want to help the Review Board project? Donate today at http://www.reviewboard.org/donate/ Happy user? Let us know at http://www.reviewboard.org/users/ -~--~~~~--~~--~--~--- To unsubscribe from this group, send email to reviewboard+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/reviewboard?hl=en
Re: User Account Management through REST API
On 6/30/2010 2:34 PM, Christian Hammond wrote: You actually can add a user in LDAP who is not in Review Board as a reviewer. They won't appear in the autocomplete, but if you type the name it will work. Review Board checks the auth backend for any unrecognized names that are entered and pulls them down then. Going the LDAP route solves the password issue too. How would you set/change passwords using the REST method? You're unlikely to get password data from redmine (I would expect). That was the idea behind using OpenID for authentication; then we don't have to be in the business of storing passwords for any of the webapps (ReviewBoard is IIRC currently the only one of our webapps that doesn't support it; MediaWiki, Drupal and Redmine all do). --Jeff signature.asc Description: OpenPGP digital signature
Re: User Account Management through REST API
On Wed, Jun 30, 2010 at 1:53 PM, Jeff Mitchell mitch...@kde.org wrote: On 6/30/2010 2:34 PM, Christian Hammond wrote: You actually can add a user in LDAP who is not in Review Board as a reviewer. They won't appear in the autocomplete, but if you type the name it will work. Review Board checks the auth backend for any unrecognized names that are entered and pulls them down then. Going the LDAP route solves the password issue too. How would you set/change passwords using the REST method? You're unlikely to get password data from redmine (I would expect). That was the idea behind using OpenID for authentication; then we don't have to be in the business of storing passwords for any of the webapps (ReviewBoard is IIRC currently the only one of our webapps that doesn't support it; MediaWiki, Drupal and Redmine all do). --Jeff Right. I was speaking more on a general level with LDAP. I wasn't really sure how many people from which groups were involved in this discussion :) OpenID is something I'd like to see. It won't happen for 1.5 (we're about to release our RC and then hopefully the final release shortly after), but probably 1.6 (which I want to be a much shorter release). Christian -- Christian Hammond - chip...@chipx86.com Review Board - http://www.reviewboard.org VMware, Inc. - http://www.vmware.com -- Want to help the Review Board project? Donate today at http://www.reviewboard.org/donate/ Happy user? Let us know at http://www.reviewboard.org/users/ -~--~~~~--~~--~--~--- To unsubscribe from this group, send email to reviewboard+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/reviewboard?hl=en
Re: User Account Management through REST API
On Wednesday 30 June 2010 20:34:31 Christian Hammond wrote: You actually can add a user in LDAP who is not in Review Board as a reviewer. They won't appear in the autocomplete, but if you type the name it will work. Review Board checks the auth backend for any unrecognized names that are entered and pulls them down then. Is this a new feature in 1.5? We are currently still running 1.0.5.1, which does not seem to support this. Would be another incentive to upgrade. ;-) Regards, Thilo -- Want to help the Review Board project? Donate today at http://www.reviewboard.org/donate/ Happy user? Let us know at http://www.reviewboard.org/users/ -~--~~~~--~~--~--~--- To unsubscribe from this group, send email to reviewboard+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/reviewboard?hl=en
Re: User Account Management through REST API
On Wednesday, June 30, 2010, Thilo-Alexander Ginkel th...@ginkel.com wrote: On Wednesday 30 June 2010 20:34:31 Christian Hammond wrote: You actually can add a user in LDAP who is not in Review Board as a reviewer. They won't appear in the autocomplete, but if you type the name it will work. Review Board checks the auth backend for any unrecognized names that are entered and pulls them down then. Is this a new feature in 1.5? We are currently still running 1.0.5.1, which does not seem to support this. Would be another incentive to upgrade. ;-) Nope, it's been there since the very early days. So long as you're hooked up to LDAP, NIS, etc., it should automatically add the user if adding their username. The username must exist already on the auth backend. If this doesn't work, it's an odd regression. Christian -- -- Christian Hammond - chip...@chipx86.com Review Board - http://www.reviewboard.org VMware, Inc. - http://www.vmware.com -- Want to help the Review Board project? Donate today at http://www.reviewboard.org/donate/ Happy user? Let us know at http://www.reviewboard.org/users/ -~--~~~~--~~--~--~--- To unsubscribe from this group, send email to reviewboard+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/reviewboard?hl=en
Re: User Account Management through REST API
Hi David, There aren't any calls for this today. The only way to programatically do this is by issuing HTTP POSTs to the proper page in the admin UI. It's something we could possibly add in a future release, but won't happen for 1.5. Technically, all the new APIs in 1.5 are undocumented, in that we have a new resource tree that I'm still writing docs for. What are your needs for a RESTful user administration API? Christian -- Christian Hammond - chip...@chipx86.com Review Board - http://www.reviewboard.org VMware, Inc. - http://www.vmware.com On Tue, Jun 29, 2010 at 10:35 AM, David Solbach d...@vidsolbach.de wrote: Hi there, is it possible to create / delete / modify users using the REST API in 1.5? I found a call to list all users, but nothing more in the documentation, yet. Is there a list of undocumented API calls somewhere? Cheers, David (reviewboard.kde.org) -- Want to help the Review Board project? Donate today at http://www.reviewboard.org/donate/ Happy user? Let us know at http://www.reviewboard.org/users/ -~--~~~~--~~--~--~--- To unsubscribe from this group, send email to reviewboard+unsubscr...@googlegroups.comreviewboard%2bunsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/reviewboard?hl=en -- Want to help the Review Board project? Donate today at http://www.reviewboard.org/donate/ Happy user? Let us know at http://www.reviewboard.org/users/ -~--~~~~--~~--~--~--- To unsubscribe from this group, send email to reviewboard+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/reviewboard?hl=en
