wp-algolia-woo-indexer icon indicating copy to clipboard operation
wp-algolia-woo-indexer copied to clipboard

Admin API Key should not be used when Write API Key is enough

Open epnb opened this issue 1 year ago • 1 comments

Hello, I'm wondering why an Admin API Key is required while the Write API Key is enough to create and update an index. At least we should be able to use a Write API Key if enough for our specific use case.

This requires to lower the access rights required in Algolia_Send_Products::can_connect_to_algolia() Instead of using self::$algolia->listApiKeys(); we could use self::$algolia->listIndices();

Thank your for your comments.

epnb avatar Mar 15 '24 09:03 epnb

Hello, I'm wondering why an Admin API Key is required while the Write API Key is enough to create and update an index. At least we should be able to use a Write API Key if enough for our specific use case.

This requires to lower the access rights required in Algolia_Send_Products::can_connect_to_algolia() Instead of using self::$algolia->listApiKeys(); we could use self::$algolia->listIndices();

Thank your for your comments.

Hi,

You might be right. I haven't done any active work on this plugin for a few years, but I will take a look when I have time.

w3bdesign avatar Mar 16 '24 00:03 w3bdesign