topic Re: How to change sharing and permissions for a lookup table using the REST API? in Splunk Search

How to change sharing and permissions for a lookup table using the REST API?

polymorphic — Tue, 14 Oct 2014 09:20:00 GMT

I need to change sharing and permissions for a lookup table file using the REST API.

I have been searching high and low for documentation, but I have been unable to find anything.

Does anyone have an idea how this is done?

Re: How to change sharing and permissions for a lookup table using the REST API?

polymorphic — Tue, 14 Oct 2014 12:40:54 GMT

appending /acl (curl -k -u admin:password https://localhost:8089/servicesNS/js/search/data/lookup-table-files/lookup.csv/acl -d owner=js -d sharing=app) seems to do the trick for owner and sharing, but i havent found the param for read and write access.
Anyone?

Re: How to change sharing and permissions for a lookup table using the REST API?

polymorphic — Tue, 14 Oct 2014 12:51:27 GMT

Got it:

curl -k -u admin:password http://localhost:8089/servicesNS/js/search/data/lookup-table-files/lookup.csv/acl -d owner=js -d sharing=app -d perms.read=* -d perms.write=*

Re: How to change sharing and permissions for a lookup table using the REST API?

ranjithjosephd — Tue, 08 Dec 2015 09:40:04 GMT

That's a good catch. It helped me now to automate the 'Roles'(edit permissions) for dashboards/fields/tags.. etc
Thank you!

Re: How to change sharing and permissions for a lookup table using the REST API?

spause — Mon, 01 Feb 2016 21:19:21 GMT

Hi, I'm hoping you could share this knowledge. Especially as it relates to tags. We have tons of tags that needs to be added and have permissions set.

Re: How to change sharing and permissions for a lookup table using the REST API?

kartik13 — Mon, 04 Apr 2016 15:54:33 GMT

Hi , can you please explain. As i did same thing but in response i am getting Unknown Url endpoint

Re: How to change sharing and permissions for a lookup table using the REST API?

polymorphic — Mon, 04 Apr 2016 16:17:39 GMT

Maybe you just need to replace ../js/.. with your own username and ../lookup.csv with your own lookup file?
Note that user "nobody" =everyone.

Re: How to change sharing and permissions for a lookup table using the REST API?

kartik13 — Mon, 04 Apr 2016 17:59:53 GMT

I tried with own username ..i am basically trying to update the permission of tags so for this i am using this url
https://localhost:8089/servicesNS/admin/search/search/tags/{tag_name}/acl

Re: How to change sharing and permissions for a lookup table using the REST API?

polymorphic — Mon, 04 Apr 2016 18:28:07 GMT

Could you please explain exactly what you are trying to achieve?

This post is originally about changing permissions on a lookup file, however from the REST endpoint in your last post im guessing that you are trying to change permissions on tags?

Please be aware that you need to access the endpoint through the current owner.
As far as i understand:
If sharing is global: https://localhost:8089/servicesNS/nobody/....
If sharing is app or private: https://localhost:8089/servicesNS/*username of owner*/....

Next comes the app directory:
eg.: https://localhost:8089/servicesNS/nobody/search/....

From here its a blur but this link has been very helpfull for me: http://docs.splunk.com/Documentation/Splunk/latest/RESTREF/RESTaccess

Re: How to change sharing and permissions for a lookup table using the REST API?

kartik13 — Tue, 05 Apr 2016 04:18:12 GMT

I am trying to create new tags through REST API. I had success in that ,creating new tags ,but then i noticed that it's in my name and also the permission is set to private.So have to change the permission of tag to public so that it can be used .
And i can my find my tag using this url
https://localhost:8089/servicesNS/ks/search/search/tags/testTag
So , if my
username ->ks
tag_name-> testTag
So i am hitting the URL with post request with following data
https://localhost:8089/servicesNS/ks/search/search/tags/testTag/acl -d sharing="app" -d perms.read="" -d perms.write=""

But its giving me Unknown EndPoint .

Re: How to change sharing and permissions for a lookup table using the REST API?

polymorphic — Tue, 05 Apr 2016 06:05:35 GMT

Making a get on this endpoint:
https://localhost:8089/servicesNS/{user}/search/search/tags/{tagname}
does not return ACL.
This makes me think that this option doesnt exists, for this endpoint which is confirmed by:
http://localhost:8000/en-US/manager/{app}/saved/ntags?ns=-&search=&app_only=1

Re: How to change sharing and permissions for a lookup table using the REST API?

kartik13 — Tue, 05 Apr 2016 08:07:58 GMT

So in that case i cannot update the permissions of the tags through REST , right ?

Re: How to change sharing and permissions for a lookup table using the REST API?

polymorphic — Tue, 05 Apr 2016 08:12:06 GMT

As far as i understand, there are no permissions you can set on "Tags » List by tag name" which are the ones your endpoint is pointing at.

Re: How to change sharing and permissions for a lookup table using the REST API?

kartik13 — Tue, 05 Apr 2016 08:38:39 GMT

Then i suppose through this url i can change the permission, please correct me if i am wrong
https://localhost:8089/servicesNS/ks/search/saved/fvtags/host=hostvalue/acl

Re: How to change sharing and permissions for a lookup table using the REST API?

kartik13 — Tue, 05 Apr 2016 08:40:22 GMT

Then i suppose through this url i can change the permission, please correct me if i am wrong
https://localhost:8089/servicesNS/ks/search/saved/fvtags/host=hostvalue/acl

Re: How to change sharing and permissions for a lookup table using the REST API?

kartik13 — Tue, 05 Apr 2016 13:26:22 GMT

Thanks a lot @polymorphic i really appreciate you time and efforts . 🙂

Got the answer finally :
You can update the permission of tags through REST API having a POST request at the following url and parameters:
https://localhost:8089/servicesNS/ks/search/saved/fvtags/tag_name/field%3Dvalue/acl -d owner="ks" -d sharing="app" -d perms.read="" -d perms.write=""
Please check the following link
https://answers.splunk.com/answers/388854/how-can-i-change-the-permissions-of-dynamically-cr.html

Re: How to change sharing and permissions for a lookup table using the REST API?

spause — Tue, 05 Apr 2016 19:08:26 GMT

Posting this as I cannot see the comment supposedly posted here by kartik13.

Got the answer finally.

You can update the permission of tags through REST API having a POST request at the following url and parameters:

https://localhost:8089/servicesNS/ks/search/saved/fvtags/tag_name/field%3Dvalue/acl -d owner="ks" -d sharing="app" -d perms.read="*" -d perms.write="*"

Re: How to change sharing and permissions for a lookup table using the REST API?

kartik13 — Wed, 06 Apr 2016 12:24:54 GMT

Thanks @spause

Re: How to change sharing and permissions for a lookup table using the REST API?

spause — Wed, 06 Apr 2016 13:54:34 GMT

Unfortunately, this doesn't work for me. I do not appear to have a "fvtags" section. I have to use a "tags" url like below, but it doesn't work to look at the acl as expected in my 2nd url below.

https://serverDNSname:8089/servicesNS/<username>/<app-name>/search/tags

https://serverDNSname:8089/servicesNS/<username>/<app-name>/search/tags/host%3Dvalue/acl

Can you confirm that the separator characters between host and value are "percent 3D"?

In the first url, it appears to be two colons.

Error received:
Unknown endpoint.

Re: How to change sharing and permissions for a lookup table using the REST API?

kartik13 — Thu, 07 Apr 2016 02:14:05 GMT

host and value are basically field value pairs of of your tag. So it will be like in in this format field=value.In the URL it is encoded as %3D(in my case).Also i observed one thing .When i tried to have my username it didn't work.So i added nobody in the username and altered the owner in the paramters.Try with that too.