ACL "description" field for Rest API

[Anna6]

Hi,

I need to open an incident through REST API. I've an account with "web_service_admin" permissions, but it's not enabled to write into "Description" field of the incident.

I can't have an "admin" role to use this webservice, but I need to set a value into "description" field.

How should I do?

Thanks in advance

Ciao

Anna

[Jaspal Singh]

Hi Anna,

As you rightly pointed its ACL.

You need to create new or update existing ACL of type Write on the Description field of Incident Table by adding 'web_service_admin' in the Role field of ACL.

[Anna6]

Thanks, I've tried it, but in "Role" tab I can't find out where setting the role on that field.

By the way, reading the other response, I've changed the role associated to the "rest account" from "web_service_admin" to "sn_incident_write" and I've created succesfully an incident from Rest Console.

[Jaspal Singh]

Good to know that you got it working but if I understand better the account is now changed to have role

sn_incident_write instead of web_service_admin which may possibly have some implications.

As web_service_admin comes with more privelges & if the account is used for other integrations it will cause issue.

So, better would be to change the ACL role. Only reason you are not able to edit the role is because you need to do an Elevate Roles.

Then open required ACL of type read & try adding role web_service_admin & save the ACL.

@Ankur Bawiskar kindly shed light if this will not be the case.

[Ankur Bawiskar]

Hi Jaspal,

users with "web_service_admin" are allowed to read, create, modify Scripted REST APIs and resources.

Considering the above case where Table API is used the user who is consuming the API should have the Create/Write ACL so that record can be inserted into the target table.

Not that much aware of "sn_incident_write" role.

Regards
Ankur