KS with privileges

benny_1 · April 21, 2017, 6:43am

Hi

I need to perform some queries from javascript.
I want to create a KS with as little privileges as possible.

How can I do that?
using the privileges parameter in the session->start?

maybe creating a new user with less privileges in the KMC?

jess · April 21, 2017, 12:22pm

You haven’t specified exactly what sort of queries you need to perform but in general, yes, you should create a KS with lower privileges by passing one of the below values in the ‘privileges’ param when calling session->start(). You can also set a short KS expiry date [default is 1 day or 86400 seconds]:

github.com

kaltura/server/blob/Lynx-12.14.0/alpha/apps/kaltura/lib/request/kSessionBase.class.php#L27


	const SESSION_TYPE_NONE		= -1;
	const SESSION_TYPE_USER		= 0;
	const SESSION_TYPE_WIDGET	= 1;
	const SESSION_TYPE_ADMIN	= 2;
	
	// Common constants
	const TYPE_KS =  0; // change to be 1
	const TYPE_KAS = 1; // change to be 2


	const PRIVILEGE_EDIT = "edit";
	const PRIVILEGE_VIEW = "sview";
	const PRIVILEGE_LIST = "list"; // used to bypass the user filter in entry list
	const PRIVILEGE_DOWNLOAD = "download";
	const PRIVILEGE_DOWNLOAD_ASSET = 'downloadasset';
	const PRIVILEGE_EDIT_ENTRY_OF_PLAYLIST = "editplaylist";
	const PRIVILEGE_VIEW_ENTRY_OF_PLAYLIST = "sviewplaylist";
	const PRIVILEGE_ACTIONS_LIMIT = "actionslimit";
	const PRIVILEGE_SET_ROLE = "setrole";
	const PRIVILEGE_LIMIT_ENTRY = "limitentry";
	const PRIVILEGE_IP_RESTRICTION = "iprestrict";
	const PRIVILEGE_URI_RESTRICTION = "urirestrict";

Depending on your use case, you may also be interested in the appToken API, for more info on that, see:

and
https://developer.kaltura.com/workflows/Generate_API_Sessions/App_Token_Authentication;step=1

benny_1 · April 24, 2017, 9:05am

I need to be able to get an entry info like name, tags and so forth.

I think I will use session->startWidgetSession