[wp-xmlrpc] XML-RPC and Roles

Hessam Armandehi hessam at farsitel.com
Thu Jun 9 21:25:19 UTC 2011


Following you can find the code from the original Android app. The method
only tries "getRecentPosts" and not any more. That fails without both
"edit_published_posts" and "edit_others_posts" accesses.  result.length ==
0.


> XMLRPCMethod method = new XMLRPCMethod((isPage) ? "wp.getPageList"
>                 : "blogger.getRecentPosts", new XMLRPCMethodCallback() {
>             public void callFinished(Object [ ] result) {
>
>
Do you mean anything different?

P.S. Why I'm insisting on using xml-rpc is that the app is already done! We
just don't want to use a user account with edit access in our source codes.
We didn't know about the permissions from the beginning and we were testing
with admin account. #FAIL

On Fri, Jun 10, 2011 at 1:44 AM, Alexander Concha <alex at buayacorp.com>wrote:

> Instead of modifying the user capabilities, why don't you add a new
> xmlrpc method that does a similar thing of get_recent_posts? You can
> easily add new xmlrpc methods.
>
> On Thursday, June 9, 2011, Hessam Armandehi <hessam at farsitel.com> wrote:
> > Dear Eric,
> >
> > Thanks for the tip. I tried the Role Scoper. It seems the user needs to
> have "edit_published_posts" and "edit_others_posts" permissions to get
> access to XML-RPC responses. True? I tried it on the original Wordpress
> Android app. I couldn't fetch the posts with Author role since it has no
> "edit_others_posts" permission. If it's true, what do you suggest then?
> >
> > Best,
> > /Hessam
> >
> > On Tue, Jun 7, 2011 at 6:22 PM, Eric Mann <eric at eam.me> wrote:
> >
> >
> > My recommendation would be to use a plugin like Role Scoper (
> http://wordpress.org/extend/plugins/role-scoper/) to create a custom
> XML-RPC user role.  You can then explicitly grant users the ability to read
> content but not create content.
> >
> > On Tue, Jun 7, 2011 at 2:26 AM, Hessam Armandehi <hessam at farsitel.com>
> wrote:
> >
> > Dear all,
> >
> > We're developing an Android app for a wordpress.org blog. Since RSS only
> lists the most recent posts and we wanted to get access to the older ones we
> decided to use XML-RPC. Unfortunately I just found that subscriber role has
> no access to the XML-RPC features.
> >
> > We need a read-only account to access XML-RPC and we don't want to put
> admin password in the app. How should we proceed? Any suggestion?
> >
> > I found this myself:
> >
> http://wordpress.org/support/topic/xmlrpc-038-getrecentposts-038-user-role
> >
> > No help though.
> >
> > Best,
> > /Hessam
> >
> >
> > _______________________________________________
> > wp-xmlrpc mailing list
> > wp-xmlrpc at lists.automattic.com
> > http://lists.automattic.com/mailman/listinfo/wp-xmlrpc
> >
> >
> >
> > _______________________________________________
> > wp-xmlrpc mailing list
> > wp-xmlrpc at lists.automattic.com
> > http://lists.automattic.com/mailman/listinfo/wp-xmlrpc
> >
> >
> >
> >
>
> --
> Alexander Concha
> http://www.buayacorp.com
> _______________________________________________
> wp-xmlrpc mailing list
> wp-xmlrpc at lists.automattic.com
> http://lists.automattic.com/mailman/listinfo/wp-xmlrpc
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.automattic.com/pipermail/wp-xmlrpc/attachments/20110610/1a61856a/attachment.htm>


More information about the wp-xmlrpc mailing list