Question: What rights are used by the Core REST API user contributions endpoints?
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	apaskulin
	Aug 20 2020, 4:32 PM

Description

To support OAuth clients created via the API Portal, we'll need to consider the rights used by the Core REST API user contributions endpoints.

For example, the PageHistoryCountHandler uses the bot right.

What do you mean by "rights used"? Which permissions should the user using the endpoint have?

For example, the PageHistoryCountHandler uses the bot right.

It looks up users that have the 'bot' permission, but the user using the endpoint doesn't need to have a 'bot' right to use it.

This was a mistake in my understanding, which @Pchelolo helped me with offline :)