Open ebruchez opened 9 years ago
<available>false</available>
in form as expectedfilterFormsAndAnnotateWithOperations
: unavailable forms are only returned by the API if the user has admin rightsform-builder-permissions.xml
doesn't have <role name="*" app="*" form="*"/>
or otherCONCLUSION: In order for this to work as expected, the user's local rights should match the user's remote rights for the service. This is a bit tricky:
RESOLUTION: Authorizer must also provide username, group and roles. See #2321 for more.
Still the case as of 2016-04-18/2016.1.
With #2321, we have revised how to fix this. Instead, Orbeon-*
authentication headers are passed directly to the service calls.
Orbeon-*
headers to remote endpoint
putWithAttachments
for attachmentssaveXmlData
for XML data, which uses fr-create-update-submission
I think this might be a regression.
The service call to
/fr/service/persistence/form
on the remote server doesn't return the unpublished form.