Jazz Forum Welcome to the Jazz Community Forum Connect and collaborate with IBM Engineering experts and users

Is it possible to get only the artifact links, if you do not have the permission to see the linked source via RM-API?

Questions
Tags
Users
Badges
Antje Rößle-Tuchel
(74●6●2●8) Apr 17 '24, 4:48 a.m.

I dry to get all satisfies-link of an ERM-artifact via  


RM.Data.getLinkedArtifacts(art.artRef, [], function(linksResult){
                if (linksResult.code != RM.OperationResult.OPERATION_OK){
                    return
                }
                // internal links are stored in linksResult.data.artifactLinks[0].linktype
                if (linksResult.data.artifactLinks.length>0){
                    let linkList=[]
                    linksResult.data.artifactLinks.forEach(function(linkDefinition){
                        art["ERM link"] = getNameOfLinkType(linkDefinition.linktype.uri, linkList)
                    })
                }
                else{
                    art["ERM link"] ="noLinkSet"
                }
}

But if the user have not the permission to see the linked resource the result is empty.

On the list of artifact links located on the requirement you can see, that there are satisfies-link with the number.

So I want to get the information, that one link with the link type satisfies exists, in my code. How can I handle this?

0 votes

Comments
Ralph Schoon
FORUM ADMINISTRATOR / FORUM MODERATOR / JAZZ DEVELOPER Apr 17 '24, 8:11 a.m.
I am not the best person to answer this, but I would like to comment, that the API should not be able to override any permissions. I think links were the user does not have access to both ends should not be visible to the user. Otherwise you could leak confidential information such as customer names in link labels that you should not be able to see.  So the only way to handle this, would be to use a user with enough permissions. I do know if the JavaScript API alowes to elevate the user, but I really doubt it. This would be a vulnerability.

Antje Rößle-Tuchel
Apr 19 '24, 3:07 a.m.
Thank you very much for your answer.  I see it like this: when I select an artifact, I see the linked elements at the bottom right corner. I can also see the artifact ID and the link type of the linked artifacts that I don't have access to myself - due of the other global configuration.  That would be more than enough for my use case. I just need the information in the API that a link to another artifact with a certain link type exists. Do I have to fetch the attribute and search for the information there, or is there another way?

0 answers
2,147 views
0 votes

Be the first one to answer this question!

Register or log in to post your answer.

Dashboards and work items are no longer publicly available, so some links may be invalid. We now provide similar information through other means. Learn more here.

Ask a question
Guidelines
FAQ
Search context
Follow this question

By Email: 

Once you sign in you will be able to subscribe for any updates here.

By RSS:

Answers
Answers and Comments
Question details
× 11,106

Question asked: Apr 17 '24, 4:48 a.m.

Question was seen: 2,147 times

Last updated: Apr 19 '24, 3:07 a.m.

Related questions
Confirmation Cancel Confirm