How to share buckets in the Autodesk Data Management API?

Question

How might one share access to their Autodesk bucket to enable other users to view and collaborate on their uploaded models? If the Autodesk Forge Data Management API supports sharing of bucket access or something similar it was clear to me in the docs here: https://developer.autodesk.com/en/docs/data/v2/reference/http/

Maybe I'm just looking in the wrong place.

score 2 · Accepted Answer · answered Jul 12 '16 at 22:24

2

You can share using A360 sharing tools (not via API), such as invite to a project. This is not yet available on the API.

Via API, you can create a 3-legged token. During this process, you might share the token or refresh code. The other developer can then access your files (on the scopes you defined), but will act as the user that authorized the access (not a true sharing).

answered Jul 12 '16 at 22:24

Augusto Goncalves

8,493
2
17
44

3

To add to Augusto's comment. It is not possible to share a bucket without also sharing your API keys - which you should not do. Augusto is describing how to 'workaround' this by providing two different developers (with different API keys) access to the same A360 account. This obviously requires that someone subscribe to an A360 account. – Stephen Preston Jul 12 '16 at 23:15

score 2 · Answer 2 · answered Jul 14 '16 at 13:02

I'm not entirely sure sharing a bucket is not possible - as far as OSS API is concerned - looking at the doc for the create bucket endpoint, it clearly seems that the "allow" field of the body is designed for that purpose:

Allow: Objects representing applications to which the owner wants to grant access at bucket creation time

Concretely this is an array of {authId (another app clientId), access (read/full)} identifying applications with which you want to share content of that bucket.

I was testing that with two different Apps I created but was unable to let the second App load the model uploaded on a shared bucket by the first one... I'm checking that with our development team and will update that thread once I gathered more info...

Now if you are talking about the data you have on A360, then Augusto's reply remains valid, you can share with other users an entire hub or invite them to a specific project (granting access to a root folder), but at the time of this writing this is doable only from our UI and will be exposed to API at a later stage. That shared data will be accessible if the user authenticate using their credentials.

If you are interested about sharing content to users and not API access, you could implement your own web application using 2-legged authentication, storing data on OSS and managing your own user accounts where you could have several of your users accessing same models and collaborate around them.

You can also expose your own API to third party users, which access your files using Autodesk APIs in the background

score 1 · Answer 3 · answered Jul 20 '16 at 09:33

1

Since buckets and files belong to the application (2-legged credentials) and not to the users that created them, the bucket and the files in it are shareable between all the users that use that application.

answered Jul 20 '16 at 09:33

Gregra

773
8
22

1

That's correct, but as I mentioned in my reply the "allow" field that can be populated when creating a new bucket is designed to grant access to that bucket to other applications by indicating a list of allowed ClientId's: "Allow: Objects representing applications to which the owner wants to grant access at bucket creation time". For some reason I couldn't get that working so I will have to investigate with the development team why is that. – Felipe Aug 04 '16 at 08:35

score 0 · Answer 4 · answered Jun 20 '19 at 14:10

Now it's possible to share buckets with other Forge apps - see here for details.

 {
    "bucketKey":"apptestbucket",
    "policyKey":"transient",
    "permissions": [{
       "authId": "clientCredentialToShareWith1",
       "access": "full/read"
    },
    {
       "authId": "clientCredentialToShareWith2",
       "access": "full/read"
    }
    ...
    ]
  }

However as of now these permissions can only be assigned when the bucket is created so you won't be able to update them afterwards...

FYI, with my test, this action only allows other client ids to access files stored in the bucket, not the viewable bubbles. — Eason Kang, Jul 20 '19 at 15:26

How to share buckets in the Autodesk Data Management API?

4 Answers4