[RSS Feed/News] REST API: alerts/{id}/mark and alerts/mark-all checks incorrect scope

[XenForo]

The endpoints for marking alerts read (both individual, and all) try to use alert:read:write scope which is inalid

PHP:

protected function preDispatchController($action, ParameterBag $params)
{
   if (strtolower($action) == 'postmark')
   {
      $this->assertApiScopeByRequestMethod('alert:read');
   }
   else
   {
      $this->assertApiScopeByRequestMethod('alert');
   }

   $this->assertRegisteredUser();
}

and

PHP:

protected function...

Read more

ادامه مطلب...