Question about ARIS Document Storage API

Posted by Ivan Ivanov

Posted on Mon, 09/19/2022 - 12:17 in Professional ARIS

Hi,

I am trying to upload a file using ARIS Document Storage API.

I followed the instructions in this topic:

ARIS Document Storage API - how to use it | ARIS BPM Community (ariscommunity.com)

The ARIS API response is "You do not have the privileges required for this action."

We tried setting read and write access to the user to the top level folder in the storage but still getting the same error.

Could someone advise how exactly to grant these privileges to upload with the API?

Can it also be some issue with the request?

The response from the API:

HTTP/1.1 400 400
Date: Mon, 19 Sep 2022 07:49:48 GMT
Server: Apache
Content-Encoding: UTF-8
Content-Length: 56
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Connection: close
Content-Type: text/plain

You do not have the privileges required for this action.

306

by Veronika Ellermann

Posted on Tue, 09/20/2022 - 14:41

Hi Ivan,

I don't know the exact priviledges that are required for the API. However, I would think that it is related to http(s)://[your server]/#default/adminUsers/u.usermanagement.permissions (just by the error message you receive).

My first guess would be to activate the document administrator priviledge.

Hope this helps.

Best,

Veronika

by Ivan Ivanov Author

Posted on Wed, 09/21/2022 - 17:58

Thank you Veronika,

Unfortunately, it didn't work.

by Ivan Ivanov Author

Posted on Wed, 09/21/2022 - 20:54

I think I found what is causing the issue. My code was using the same token for GET and POST requests to the Document Storage API but it seems different licenses are required for these requests. And it had only 3 parameters - token, name, password.

It seems the token request requires additional parameter key. I will need to find out if my company have the required license for mobile uploads and to provide the mobile key to the token.

                "tenant": "default",
                "name": "system",
                "password": "abc",
                "key": mobileAPIKey

by Ivan Ivanov Author

Posted on Mon, 09/26/2022 - 08:59

Does anyone know if it is still required to provide

"key": mobileAPIKey

in the token request for uploading to ARIS Document Storage?

by Runé Becker

Posted on Mon, 09/26/2022 - 11:06

Dear Ivan,

Since ARIS 10.0 SR12 there is no longer an API key needed to request an UMC token which enables access for further API requests.

In the UMC there exist both API calls, the old/obsolete one where an API key is needed, and right to it the new one where that parameter is no longer required: /apidocs/swagger-ui/index.html?url=/umc/apidocs/swagger.json