Anonymous queries?

[mostl33]

Heya!

We are currently evaluating "BIMserver" as an in-house IFC Database (part of a larger Application). Is it possible to allow anonymous API queries to the server?

Thanks in advance & best Regards
ML

[hlg]

There are some API methods that do not require a login token, like MetaInterface.getServiceInterfaces or AdminInterface.getServerInfo for example. I think there are some methods which should have only authorized access, but currently do not properly check permissions. So you might be able to access some methods with lower priviledge or unauthorized although this is not intended to be like that. We plan to fix that by tightening access control. There is not plan to relax access control though. If you want to use the Opensource BIMserver as a backend database and handle user management and access control in another part of your larger application, I would suggest to use a single admin user for database access. This would be perfectly within the bounds of the original intentions: #732. There was also the idea to remove user management altogether from the BIMserver, but I tend to keep it, to simplify plain setups, demo and testing scenarios.