Third-party App scope for reading dataset markings?

Ask the Community
1

For our in-house OSDK React application we need to read the markings associated with a dataset. We are using the /compass/api/resources/$rid API to retrieve the dataset details with the “markings” decorator (/compass/api/resources/$rid?decoration=markings).
This works with the Foundry user token, but it doesn’t work with the token issued to our third-party app (the markings property is simply an empty array instead of the list of markings). We are using the following scopes:

	'api:read-data',
	'api:write-data',
	'compass:view',
	'compass:discover',
	'compass:read-resource',
	'compass:read-branch',

What scope do we need to add to retrieve the dataset markings?

1 Like
2

Hi, note that I believe this API isn’t intended to be used by customers so we can’t guarantee any support here.

I suspect you might need the TPA isn’t able to see the marking. You might want to try using the Get Marking endpoint to debug this. This endpoint needs api:admin-read, which might also be needed for your compass call.

It’s also worth remembering that dataset transactions can be marked independently of the dataset’s markings due to input data having markings.

3

Hi Ben, thanks for getting back to me. I’m actually just interested in getting back the organization markings (inherited from the project). I don’t even see those. Just an empty array. Works fine with the Foundry developer token (same user).

4

Could you try gatekeeper:mandatory perhaps?

You might also need the permissions to view the organisation as well. I’ve followed up through your internal channels to debug this more easily but will make sure to post the solution here once we find it.

5

For future reference, the missing scopes were:

	gatekeeper:view-marking
	gatekeeper:view-category
2 Likes