Device access to roles

MIP
, , ,
1

Hi,

Any better way to find all the roles the devices belong to without iterating over all the roles in changesecuritypermission?

We are using SDK 2022 R2.

Thanks.

Vega

2

EffectivePermissions was introduced to the REST API in 2024R2. Read about it here…

https://doc.developer.milestonesys.com/html/index.html?base=gettingstarted/mip2024r2_intro.html&tree=tree_search.html?search=effectivepermissions

https://doc.developer.milestonesys.com/mipvmsapi/api/config-rest/v1/#section/Introduction/This-release

This will require the XProtect VMS to be 2024R2 or newer.

3

Should we migrate all existing component integrations currently using the config API to the REST API?

Is ConfigAPI getting obsolete?

4

Rest API was prioritized here. In general ConfigAPI is not getting obsolete, but I do get the information that there are no plans to port “effectivePermissions” to ConfigAPI.

5

Is there a call to get all cameras under a given Role or vis-à-vis all roles for a given camera?

6

We use ConfigAPI and have 2000 Cameras with 500 Roles, this iterating of roles for each camera takes very long time , forever

Any way to reduce?

7

500 roles seem to be a lot. Can you tell me why there are so many roles? Your real life scenario here could be interesting for Milestone to understand because I don’t believe we have envisioned so many roles in our design user scenarios.

8

We are eagerly awaiting this functionality, and we have received several follow-ups from customers as well. Your update on the status would be greatly appreciated.

9

Milestone Development has implemented functionality to get permissions for a role. This will be in 2025R3 when it is released.

GET effectivePermissions/{sec-ns}?roleId={id}

This should be a first step in getting the permissions, it still requires iterating roles.

10

Thanks for the update.

To clarify, could you please explain what sec-ns refers to in the context of the GET effectivePermissions/{sec-ns}?roleId={id} API?

Appreciate your support.

11

SecurityNamespace.

https://doc.developer.milestonesys.com/mipvmsapi/api/config-rest/v1/#tag/Security/operation/effectivePermissions_get

One example is ‘cameras’ but you can get these namespaces using

GET securityNamespaces

https://doc.developer.milestonesys.com/mipvmsapi/api/config-rest/v1/#tag/Security/operation/securityNamespaces_get

What is new is that you can in the coming version specify the role, in the current version you only get the answer for the role you have yourself.

12

Milestone Development has implemented functionality to get list of roles a camera is a member of. This will be in 2025R3 when it is released.

It will look something like:

POST /rolePermissions?task=GetAllPermissions

{

“path” : {

“type” : “camera”,

“id” : “the camera guid”

}

}

The above is for a camera, but could be any object.

13

Hello @Bo Ellegård Andersen (Milestone Systems)​,

Thanks for the support.

We were wondering if there is any tentative timeline available for the 2025R3 release. We are eagerly looking forward to trying out the new implementation.

14

It should be next week that we have release - General Availability…

15

In Milestone XProtect 2025R3 with the API, the call works fine.

But we installed the API (Milestone XProtect API Gateway 2025 R3 Installer) on XProtect 2024R2, and we are getting 500 - Internal Server Error.

Is there any way we can get this API working on Milestone 2024R2 as well?

16

You cannot install a newer API Gateway on an older VMS. The XProtect Management Server and the XProtect API Gateway has to be the same version.
You cannot use the solution on an older version, perhaps you can persuade the customer to upgrade the VMS.