Permission is not respected when database is accessed via API

Bika.ai discussions
,
1

Permission in the UI works as expected, but not via API.

Replication steps:

  1. Main account create a database (Test Database)
  2. Update permission of Test Database to only be accessible by Main account
  3. Invite a Test User to the project
  4. Test User get own API token
  5. Via API, Test User can view the list of all databases and their contents including the supposed to be hidden ones.
2

Hi @carloginocatapang
Hello, according to your description, I have set the permission for a specific table on the UI page to “view only by oneself.” Other members should not be able to access it via API. Could you please provide screenshots and the corresponding API? Thank you for your cooperation.

3

Hi @pengjin,

Weirdly, I cannot replicate the issue. Maybe I did something wrong.

Thanks for taking the time to respond.

4

Hi @carloginocatapang
OK, if it happens again next time, could you please provide a screenshot or screen recording? Thank you

1 Like