Permissions for API Key

[psla]

Hi,
what permissions for the API key are needed? I imagine stack.create/read/update and ... ? (library.read? timeline.read?)

[Majorfi]

Oh tricky one, I didn't notice the change in the API key.
I guess you can try with:

We are fetching the assets to know the one that exists, and then we are playing with the stacks (delete is also useful to remove empty stacks)
I will try to run some test next week to get the exact permissions required

[psla]

ERRO Error fetching current user: error response: 403 Forbidden - {"message":"Missing required permission: user.read","error":"Forbidden","statusCode":403...

Added user.read as well and now it seems to be doing something :)

ERRO Error modifying stack: error response: 400 Bad Request - {"message":"Not found or no asset.update access","error":"Bad Request","statusCode":400,"correl
ERRO Error modifying stack: error modifying stack: error response: 400 Bad Request - {"message":"Not found or no asset.update access","error":"Bad Request","
INFO --------------------------------

This error is weird -- "not found" or "no asset.update access". So... maybe it tries to use asset.update as well?

[justinbowes]

As I introspect the Go client library, I also see album management functions in the client that appear to be tested but not documented in the project features.

Is the following list of permissions complete?

• asset.{read, update, delete, view}
• stack.*
• user.read

[justinbowes]

Am running cron-style with the following perms:

• album.create,
• album.read,
• album.update,
• asset.read,
• asset.view,
• asset.update,
• asset.delete
• duplicate.read,
• duplicate.delete,
• stack.create,
• stack.read,
• stack.update,
• stack.delete,
• user.read

Not sure if this is the minimum set -- especially unsure whether the album perms are needed

[Majorfi]

Hi
For the main stacking use, these ones should be enough:

• user.read (Identify current user)
• asset.read (Search/fetch assets)
• stack.read (Fetch existing stacks)
• stack.create (Create stacks)
• stack.update (Modify stacks)
• stack.delete (Delete stacks, to reset, replace, remove single-asset)
• album.read (Resolve album name)