remoting api: proper call to get different sys_userid and sys_groupid

I am trying to obtain the standard permissions for when an admin creates some service (i.e. domain/spam filter etc) for a client, that is

sys_userid = admin or reseller id
sys_groupid = client
sys_perm_user = riud
sys_perm_group = ru

I can't find the proper parameters in the parameters array for the remoting api.

Thank you.

 

Till,

thank you for pointing out the mappings (I knew about them, but it happens that on my system the id's are the same, so I mix them in my mind easily).

So, how to I obtain the effect of creating a (mail) domain owned by the admin user, but with permissions for the client to add/delete mailboxes, with no permissions to delete the whole domain, via remoting api?

I see that if I set the client_id to the client, all permissions are assigned to the client, and the client is able to delete the domain and all mailboxes underneath with 2 clicks (ask me how I know this...).

thanks.

 

Till... shall I use direct SQL to do what the GUI does?

 

I think I can do that.

 

proposed addition

Till,

Here's my proposed addition to the remoting api. I hope the approach is right.

There's a new privilege required, that I named admin_record_permissions. admin to mark it as a superuser privilege (you can change ownership of anything) and record_permission to denote the operation.

Code:

        // This will update the record permissions for a record in any table.
        public function update_record_permissions($tablename, $index_field, $index_value, $permissions) {
		global $app;
		
		if(!$this->checkPerm($session_id, 'admin_record_permissions')) {
			$this->server->fault('permission_denied', 'You do not have the permissions to access this function.');
			return false;
		}

                foreach ( $permissions as $key => $value ) {  // make sure only sys_ fields are updated
                    if ( !preg_match('/^sys_.+/', $key )) {
                        $this->server->fault('invalid parameters', 'Only sys_* parameters can be changed with this function.');
                    }
                }
                
                return $app->db->datalogUpdate( $tablename, $permissions, $index_field, $index_value ) ;
        }