question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

"metadata-export" script should NOT allow file location to be specified via REST API /scripts endpoint

See original GitHub issue

Created based on feedback in https://github.com/DSpace/dspace-angular/pull/636#pullrequestreview-441228120

Currently, in the Scripts & Processes UI, any administrator can specify a --file location, for the metadata-export script. Since that script is only able to write a file to the server where DSpace is running, it’s unlikely the Admin will know an exact path to type in. Additionally, this could be a security issue if you can write the output file anywhere on the system. Ideally, instead, the file should always be written to the [dspace]/exports/ folder (which is where it was written in DSpace 6.x, IIRC).

Ideally, the REST API should NOT allow a --file parameter to be passed in. Instead, it should automatically create a new file in the [dspace]/exports/ folder at all times. Therefore, the user should not be able to specify this location, however they can download the file once the export completes.

Issue Analytics

  • State:closed
  • Created 3 years ago
  • Comments:5 (4 by maintainers)

github_iconTop GitHub Comments

1reaction
lieven-atmirecommented, Jul 16, 2020

we estimate the work to be around 3 hours

0reactions
KevinVdVcommented, Aug 7, 2020

@tdonohue I opened up a new PR for this issue that follows the suggestion you made: https://github.com/DSpace/DSpace/pull/2924

Read more comments on GitHub >

github_iconTop Results From Across the Web

Enabling script authorization and access | Apps Script
If you need to use the Apps Script API in your application, you must enable the API in the application's Cloud Platform (GCP)...
Read more >
Native API — Dataverse.org
Native API. The Dataverse Software exposes most of its GUI functionality via a REST-based API. This section describes that functionality.
Read more >
Scripted REST API example - script samples - ServiceNow Docs
These examples demonstrate how to create various resource scripts for a scripted REST API.
Read more >
NetSuite Applications Suite - SuiteTalk REST Web Services ...
Metadata Export to Planning and Budgeting · Supported Metadata Saved Searches · Supported Prefixes of Metadata Saved Searches IDs · Item Metadata ...
Read more >
Vidispine REST API Documentation
Vidispine REST API Documentation, Release 4.17.1. File naming scripts. Export locations can have a JavaScript associated with them.
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found