Custom Role with KVM, Shared Flow, Hook Permissions
I created a custom role for developer (read and write) in the GUI.
I found out later that I can't assign to the role the ability to
add/update KVM
add/update shared flows
(possibly add/update hooks)
I attempted the next script.
curl -X POST \ https://api.enterprise.apigee.com/v1/o/{{MY_ORG}}/userroles/{{MY_CUSTOM_ROLE}}/permissions \ -H 'Accept: application/json' \ -H 'Authorization: Basic {{M
Y_BASE_64_ORG_USER_AND_PASSWORD}}' \ -H 'Content-Type: application/json' \ -H 'Postman-Token: b4c5aab1-b293-4a4c-9780-46b98e919e03' \ -H 'cache-control: no-cache' \ -d '{ "path" : "/environments/dev/key-value-maps", "permissions" : ["put", "get"] }'
and it says 201 created.
but when logging in with a user with that role i still dont see add edit buttons. (I also tried the wildcard /key-value-maps/* )
Answer by Dino-at-Google
·
Mar 12 at 04:18 PM
Are you sure the correct path is "/environments/dev/key-value-maps" ?
I thought it would be "/environments/dev/keyvaluemaps"
Can you try that?
you are absolutely right, /environments/stage/keyvaluemaps this works.
it seems I didnt have the right path for sharedflows since I got 201 but change didnt reflect on my user/role
for sharedflow i used
/environments/dev/sharedflows
do you have the right paths for sharedflows/hook ?
I think for sharedflows (ability to create/read/update/delete sharedflows) the path is
/sharedflows
/applications
To grant the ability to deploy sharedflows to a particular environment, I believe the path is
/environments/dev/sharedflows/*/revisions/*/deployments
/environments/dev/applications/*/revisions/*/deployments
EDIT - Confusingly, I think the "applications" path element is used for both sharedflows and apiproxy bundles.
thank you !!! ill test it out tonight!
