I noticed that calling a pre-existing Cognite Function requires the functionsAcl:WRITE capability. Essentially this means that I cannot make a function available to users/dashboards/applications without simultaneously giving them permission to delete functions. What is the reccommended pattern for ACL when making Cognite Functions that are to be called by others?
Answer
Calling existing Cognite Functions requires the functionsAcl:WRITE capability
Best answer by Ivar Stangeby
Hello Peder!
Currently, we do not support the granularity you are requiring in our ACLs as we only have read/write ACLs.
Adding a `functionsAcl:CALL` should be sufficient to let you differentiate between users allowing to create/delete functions, and simply calling them. I will add this as a feature-request.
/ Ivar
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.
Check the
documentation
Ask the
Community
Take a look
at
Academy
Cognite
Status
Page
Contact
Cognite Support