Forums

Articles
Create
cancel
Showing results for 
Search instead for 
Did you mean: 

Is there a way I can restrict the "Cleanup API" API option from my ConfiForm?

Mitesh Sharma October 16, 2020

I am designing a form , which is going to hold important data for record keeping. While import API is an option that I'd like to keep but I don't want anyone to use "Cleanup API" option and delete the records by mistake.

Is there a way I can do that?

 

1 answer

0 votes
Alex Medved _ConfiForms_
Community Champion
October 16, 2020

Hi

Take a look at this page https://wiki.vertuna.com/pages/viewpage.action?pageId=14123273 and the page it mentions on Confluence and ConfiForms permissions

Simply put - restrict "edit" permissions on the page to hide this from "ordinal" users

Alex

Mitesh Sharma October 16, 2020

Well, i have a list of 50 users who should be able to use ImportAPI but must not have access to DeleteAPI.
Is there a way we can put such a restriction?

 

Will it work if I don't grant them 'superuser' access , and provide them the ImportAPI url :

Direct link to Import API is: http://CONFLUENCE_SERVER/confluence/confiforms/import.action?pageId=PAGE_ID 

?

Like Erik Buchholz likes this
Alex Medved _ConfiForms_
Community Champion
October 20, 2020

At the moment permissions could be granted to (or revoked) for 3 functions

  • Import API
  • Recovery API
  • Cleanup API

at once. The reasoning behind this is you either allow working with "bulk data" and your form or not. As there should always be a possibility to clean up if the import when wrong or something like that

Mitesh Sharma October 21, 2020

How about, if delete goes wrong! I feel that's a a bigger risk as well.

 

Is there a way I can have a daily export of my confiform data, so that if somebody deletes the form records by mistake, I could use the exported data for easy recovery?

Alex Medved _ConfiForms_
Community Champion
October 21, 2020

Well, if you allow you users to manage the data and use import then we think these users should have an idea what they are doing. 

ConfiForms does not have a background process you can schedule

But you can always have a CRON or something that runs periodically and calls "Recovery API", basically the download URL of a RAW file (which you can always recover from)

Click on recovery API and you will see a link to download RAW file - this is the way to get the export from ConfiForms dataset in it's original form

Suggest an answer

Log in or Sign up to answer
TAGS
AUG Leaders

Atlassian Community Events