Changes to SOAP in 4.5?

[dbarnett]

The following SOAP request works in 4.0:

<SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" xmlns:ns1="urn:zimbraAdmin" xmlns:ns2="urn:zimbra" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:SOAP-ENC="http://schemas.xmlsoap.org/soap/encoding/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/">
<SOAP-ENV:Header>
<ns2:context>
<authToken>(valid token)</authToken>
<nosession/>
</ns2:context>
</SOAP-ENV:Header>
<SOAP-ENV:Body>
<ns1:GetAccountInfoRequest>
<account by="name">account@domain.com</account>
</ns1:GetAccountInfoRequest>
</SOAP-ENV:Body>
</SOAP-ENV:Envelope>

In 4.5 it returns:

"permission denied: need admin token"

Has something significant changed in the SOAP interface in 4.5 that is causing this?

[dkarp]

I believe that some of the permissions issues were tightened up. In this case, you must do an <admin:AuthRequest> to get a valid admin auth token to execute the <GetAccountInfo> command. A regular <acct:AuthRequest> gives you a non-admin token for the authenticated account, and that non-admin token does not carry with it any rights beyond access to the auth'ed account's mailbox.

[dbarnett]

Thats got it, thanks.