Privileges

All authenticated methods take a session key as the first parameter (shown as skey in the parameter descriptions). The server allows the client to perform only those operations allowed by the privileges of the user whose identity was used to create the specified session. If the client attempts to perform an operation that is not allowed, the result will be a SOAP Fault.

The specific operations available to a user depend on the roles that have been assigned to that user (or the user’s group) by the administrator. The getUserRoles method can be used to find out what roles have been assigned to a particular user. In the default server installation, the following roles are predefined; a particular server might also have customized roles defined by the administrator or provided as part of a specially licensed module.