Permission validation in toolkit

[meleu]

From @Jamiras on March 21, 2018 15:20

As a non-developer, I don't want the buttons for promoting achievements to be active as pushing them will only generate an error. Alternately, a permissions error could be displayed without sending anything to the server.

There is currently no way to determine the user's account type in the toolkit. Changes would have to be made to return it from one of the APIs (probably the login API).

There are other things that could be better handled in the toolkit knowing the user's account type, like ROM linking.

Copied from original issue: RetroAchievements/RASuite#64

[meleu]

Maybe it's something to be sorted by @RetroAchievements/raweb

[meleu]

From @GameDragon2k on March 22, 2018 23:59

This would fix numerous issues so I'm all for this.

[meleu]

From @ScottFromDerby on March 23, 2018 1:0

Agreed, this would be great, I'm all for this. We'll need the server to
spit out permissions on login, and to store them in app secondarily

On Thu, 22 Mar 2018, 23:59 GameDragon2k, [email protected] wrote:

This would fix numerous issues so I'm all for this.

—
You are receiving this because you are on a team that was mentioned.
Reply to this email directly, view it on GitHub
RetroAchievements/RASuite#64 (comment),
or mute the thread
https://github.com/notifications/unsubscribe-auth/AiyhtmU-lqiScAO_ToDREMJg2o0pbHp8ks5thDrIgaJpZM4S0T5D
.

[meleu]

From @kdecks on March 23, 2018 19:15

Very useful.

I'd suggest hiding developer achievements from non-devs. Being able to review the addresses used and the counters associated with an achievemet is an excellent way to find exploits, essentially soft cheating.