[wp-xmlrpc] XML-RPC and Roles

[Muro, Matthew]

The purpose of XML-RPC is to be able to add and edit posts.  XML-RPC needs authentication because it has the ability to read posts which are not public.

A custom RSS feed is your best bet at this point.

Matthew Muro

On Jun 9, 2011, at 4:25 PM, Hessam Armandehi wrote:

Following you can find the code from the original Android app. The method only tries "getRecentPosts" and not any more. That fails without both "edit_published_posts" and "edit_others_posts" accesses.  result.length == 0.

XMLRPCMethod method = new XMLRPCMethod((isPage) ? "wp.getPageList"
                : "blogger.getRecentPosts", new XMLRPCMethodCallback() {
            public void callFinished(Object [ ] result) {


Do you mean anything different?

P.S. Why I'm insisting on using xml-rpc is that the app is already done! We just don't want to use a user account with edit access in our source codes. We didn't know about the permissions from the beginning and we were testing with admin account. #FAIL

On Fri, Jun 10, 2011 at 1:44 AM, Alexander Concha <alex at buayacorp.com<mailto:alex at buayacorp.com>> wrote:
Instead of modifying the user capabilities, why don't you add a new
xmlrpc method that does a similar thing of get_recent_posts? You can
easily add new xmlrpc methods.

On Thursday, June 9, 2011, Hessam Armandehi <hessam at farsitel.com<mailto:hessam at farsitel.com>> wrote:
> Dear Eric,
>
> Thanks for the tip. I tried the Role Scoper. It seems the user needs to have "edit_published_posts" and "edit_others_posts" permissions to get access to XML-RPC responses. True? I tried it on the original Wordpress Android app. I couldn't fetch the posts with Author role since it has no "edit_others_posts" permission. If it's true, what do you suggest then?
>
> Best,
> /Hessam
>
> On Tue, Jun 7, 2011 at 6:22 PM, Eric Mann <eric at eam.me<mailto:eric at eam.me>> wrote:
>
>
> My recommendation would be to use a plugin like Role Scoper (http://wordpress.org/extend/plugins/role-scoper/) to create a custom XML-RPC user role.  You can then explicitly grant users the ability to read content but not create content.
>
> On Tue, Jun 7, 2011 at 2:26 AM, Hessam Armandehi <hessam at farsitel.com<mailto:hessam at farsitel.com>> wrote:
>
> Dear all,
>
> We're developing an Android app for a wordpress.org<http://wordpress.org/> blog. Since RSS only lists the most recent posts and we wanted to get access to the older ones we decided to use XML-RPC. Unfortunately I just found that subscriber role has no access to the XML-RPC features.
>
> We need a read-only account to access XML-RPC and we don't want to put admin password in the app. How should we proceed? Any suggestion?
>
> I found this myself:
> http://wordpress.org/support/topic/xmlrpc-038-getrecentposts-038-user-role
>
> No help though.
>
> Best,
> /Hessam
>
>
> _______________________________________________
> wp-xmlrpc mailing list
> wp-xmlrpc at lists.automattic.com<mailto:wp-xmlrpc at lists.automattic.com>
> http://lists.automattic.com/mailman/listinfo/wp-xmlrpc
>
>
>
> _______________________________________________
> wp-xmlrpc mailing list
> wp-xmlrpc at lists.automattic.com<mailto:wp-xmlrpc at lists.automattic.com>
> http://lists.automattic.com/mailman/listinfo/wp-xmlrpc
>
>
>
>

--
Alexander Concha
http://www.buayacorp.com<http://www.buayacorp.com/>
_______________________________________________
wp-xmlrpc mailing list
wp-xmlrpc at lists.automattic.com<mailto:wp-xmlrpc at lists.automattic.com>
http://lists.automattic.com/mailman/listinfo/wp-xmlrpc

<ATT00001..txt>