Security Level Parent/Child

Ignition 8.3 Early Access
1

image
image264×308 2.83 KB

I added the API Level and 3 Childs.

For the API-Key I set the API Security Level.

image
image446×327 3.88 KB

For Gateway Write Permission I set Write Security Zone.

image
image1090×362 13.9 KB

So now the Problem is, that I always get a Unauthorize Error Message, if I want to call a POST command. Only if I check the single Security Levels (Access,Write,Read) on the API-Key it will work.

Is this a Bug or should it work like this?

I hope it is understandable.

Thanks.

2

This is intended behavior.

Security level inheritance works the opposite of what you're describing.

That is,
If your API key is configured with API/Write, then you explicitly have API/Write, and implicitly have API.

So it doesn't really make sense to have an Access security level.
If you want 'Write' to imply 'Read' (and 'Read' to imply 'Access') then just make it a hierarchy:
API/Read/Write. Then any key that has Write implicitly has the API/Read and API levels as well, and you can configure those in your permissions.

2 Likes