Read Only Developer Key

[moein_ghodrati]

Current Developer Keys allow for all HTTP verbs to be called including DELETE, PUT, UPDATE, POST whilst all analytics applications would only have read only access via GET method. Having the update or delete APIs exposed increases the chance of unintended or hostile removing the data or changing the environment unintentionally.

An analytics developer key that only provides access to the Canvas GET APIs would solve this problem.

[d_ellis]

Sounds like an eminently sensible security need to me

[kirsty_kitto]

And one that would make it easy for learning analytics practitioners to interface with Canvas data to build specialised applications - could make Canvas a leader for community driven development of innovative learning analytics applications...

[RobDitto]

For those interested in this idea, 

https://community.canvaslms.com/docs/DOC-14925-canvas-beta-release-notes-2018-07-02#jive_content_id_... brings a welcome new set of features. Hallelujah!