cancel
Showing results for 
Search instead for 
Did you mean: 

Read Only Developer Key

Read Only Developer Key

(1)

Current Developer Keys allow for all HTTP verbs to be called including DELETE, PUT, UPDATE, POST whilst all analytics applications would only have read only access via GET method. Having the update or delete APIs exposed increases the chance of unintended or hostile removing the data or changing the environment unintentionally.

An analytics developer key that only provides access to the Canvas GET APIs would solve this problem.

3 Comments
d_ellis
Community Contributor

Sounds like an eminently sensible security need to me Smiley Happy

kirsty_kitto
Community Member

And one that would make it easy for learning analytics practitioners to interface with Canvas data to build specialised applications - could make Canvas a leader for community driven development of innovative learning analytics applications...

RobDitto
Community Champion

For those interested in this idea, 

https://community.canvaslms.com/docs/DOC-14925-canvas-beta-release-notes-2018-07-02#jive_content_id_... brings a welcome new set of features. Hallelujah!

About Idea Conversations
In the Canvas Community Ideas space, you can share, converse, and rate idea conversations related to software improvements to Canvas products.