You are creating an API token to allow a DevSecOps engineer to create and update a URL list using REST API v2. In this scenario, which privilege(s) do you need to create in the API token?
26 comments · newest first
NA
Nancey
11 months ago
Just write access for '/urllist' sounds risky, not sure about that.
JI
Jillian
11 months ago
I thought you might need access for '/events' too, but I guess not?
CA
Carmen
11 months ago
Wait, why would you only need read access? That seems off.
ME
Merri
11 months ago
I agree, option B is the way to go!
PO
Portia
11 months ago
You definitely need read and write access for the '/urllist' endpoint.
RU
Rusty
12 months ago
I keep second-guessing myself, but I think we definitely need to allow write access for the '/urllist' endpoint. The read access might be optional?
OR
Orville
12 months ago
I practiced a similar question, and I feel like read access alone wouldn't be enough for creating or updating. So, it must be option B.
MA
Mabelle
12 months ago
I'm not entirely sure, but I remember something about needing specific permissions for different endpoints. Could it be just write access for '/urllist'?
SV
Svetlana
1 year ago
I think we need to provide both read and write access for the '/urllist' endpoint since the engineer needs to create and update the list.
TA
Tashia
1 year ago
I'm a little confused by the wording of the question. Is there a specific reason why the '/events' endpoint is mentioned? I want to make sure I'm not missing something important there. I'll double-check the details before submitting my answer.
JA
Jacqueline
1 year ago
Option B looks like the right choice to me. The engineer needs to be able to manage the URL list, so giving them read and write access for the '/urllist' endpoint seems like the appropriate privilege to grant.
ME
Melynda
1 year ago
Hmm, I'm a bit unsure here. The question mentions "API token" and "REST API v2", so I wonder if there are any specific privileges or permissions I need to consider beyond just read/write access. I'll need to think this through carefully.
MA
Marylyn
1 year ago
This seems straightforward - the DevSecOps engineer needs to be able to create and update the URL list, so I'd go with option B to provide read and write access for the '/urllist' endpoint.
EZ
Ezekiel
1 year ago
Hmm, I'm not sure about a couple of these. I'll need to review my notes on interval data types to make sure I'm not missing anything.
MA
Malcolm
1 year ago
Ah, this is a good one. I'd recommend B and D - sending different messaging to inactive subscribers and removing the non-openers. That should help re-engage the audience and improve those open and click rates.
HA
Haley
1 year ago
Ah, I've covered this topic before in my studies. A vendor-neutral approach gives you the freedom to choose the best-fit technologies without being tied to a single vendor. That's crucial for building scalable, adaptable service-oriented solutions.
IE
Iesha
3 years ago
Ah, but then the engineer wouldn't be able to see what's already in the list before making changes. I think read and write access is the safest bet here.
FA
Fatima
3 years ago
I'm not so sure about that. What if we only want the DevSecOps engineer to be able to update the URL list, but not read it? Then option D would be the better choice.
GE
Georgene
3 years ago
I agree with you, option B is the way to go. The DevSecOps engineer needs to be able to both create and update the URL list, so they'll need full access to that endpoint.
IR
Ira
2 years ago
Agreed, option B it is.
BE
Benedict
2 years ago
Great, let's go with option B for the API token.
SI
Simona
2 years ago
Definitely, that covers all the necessary permissions.
LI
Lina
2 years ago
Option B it is then.
CH
Chara
2 years ago
I agree, the DevSecOps engineer will need read and write access.
ON
Oneida
2 years ago
I think option B is the best choice.
LO
Louann
3 years ago
Hmm, this is a tricky one. I think we need to provide read and write access for the '/urllist' endpoint, so I'd go with option B.