Re: Some questions about the API

Hi,

Werner Schuster wrote:
> Hmm, so when I create an Account, I automatically have a
> Person document (which contains no data or empty strings for fields like
>  "name"?);
That's right - if you add a user with account.insert({login :'foobar'}),
you'll end up in a person record containing an empty name field.

> OK, thats good;
> I just rememebered, that there are some other missing documents:
>  - JobHistory (they are supposed to be returned by jobs.getHistory);
>  - FetchSpecification (well, you explained that below, but it might
> be useful to put that in the doc as well);
>  - Resource
>
> I don't think these are described anywhere in the doc (at least not
> in the "Beschreibung der Dokumente" chapter.
I'll have a look at these - but resources should already be in the docs.
I'll rebuild the german one and put it on the docs Plone server.

> I have another question:
> The account.setPassword and account.updatePassword allow to send
> an encrypted password as argument; what algorithm is used for the
> encryption? Or would it be better to send the passwort unencrypted?
>  (as the XML-RPC connection should (in my opinion) be run over
> a SSL-secured connection only (at least for serious applications),
> sending the password in plaintext should not be a big security problem);
The crypt algorithm used is standard Unix crypt(). If you use SSL
anyway, it shouldn't matter if you crypt the password on the client
or send it plaintext and let the server crypt it. It's just a
matter of taste (and using unencrypted passwords as default makes
it easier for third party applications as they don't need to
implement the crypting of the password themselves).

Greets

Bjoern

--
http://www.opengroupware.org

--
OpenGroupware.org XML-RPC
xmlrpc@xxxxxxxxxxxxxxxxx
http://mail.opengroupware.org/mailman/listinfo/xmlrpc