• Replies 4 replies
  • Subscribers 0 subscribers
  • Views 17 views
  • Users 0 members are here
Options
3sides - Social sharing widget
Related

Allow API access when using terms and conditions

Ryan McDonough
27406

If a user has agreed to the terms and conditions of the website we should be able to send requests on their behalf to the API.

If they haven't agreed the API should respond back with a 4XX response noting that the Terms and Conditions need agreeing to first in the response message.

  • Ryan McDonough thank you for raising the requirement. There is a setting that our support team can disable which will buy pass this site security setting when called from the API, please raise a support ticket for this security setting to be disabled. We also plan to provide a dedicated API to accept terms and conditions using the API.

  • Hey Imran, is there a check I can do to check a user has agreed to the terms and conditions myself? As obviously if they do work via the API and haven't agreed to those terms then they aren't bound by them.

  • Imran Aziz is there any way to make this bypass setting more granular? right now it's very broad. it applies to every user and to every REST call. I suggest the following changes:

    1 - Apply the bypass only to site admins and system admins. (perhaps that is a separate bypass setting.) those users would be treated specially. AND/OR

    2 - Apply the bypass only to administrative REST call, like getting site settings, site users, etc. Not related to site content. That will permit site monitoring via REST calls but not allow site content to be accessed when the site restrictions apply.

  • Imran Aziz Hi Imran, do you know when this API will be available to accept the Terms and Conditions?