dhis2-users team mailing list archive

[Jason Pickering <jason.p.pickering@xxxxxxxxx>]

Maybe

https://play.dhis2.org/dev/api/users?fields=firstName,surname,email,userCredentials[username,lastLogin,created,disabled,userRoles[id,name]],organisationUnits[id,name]&paging=false

Regards,
Jason



On Tue, Apr 11, 2017 at 3:46 PM, Raminosoa Rabemanantsoa, Tantely <
traminosoa@xxxxxxxxxx> wrote:

> Hi Jason,
>
> If I would like to bypass this SQL scripts and use the Web API as you
> already proposed, how could we write the Web API in order to pull out a
> list of the following informations from the users:
>
> username,surname, firstname, email, phonenumber, lastlogin, created,
> disabled, user role, user orgunits
>
> Regards,
>
> Tantely.
>
> On Tue, Apr 11, 2017 at 4:29 PM, Jason Pickering <
> jason.p.pickering@xxxxxxxxx> wrote:
>
>> Hi there.
>> We have had enough security problems lately, It may not be a good idea to
>> encourage even more of them.
>>
>> This is a "good" way around the security attempts which have put in
>> place, but its a very bad idea to have this table as an SQL view. This was
>> the entire reason of why we attempted to protect it from direct access via
>> SQL views, but, the regular expression which does this does not catch the
>> use of the schema name. We will fix it
>>
>> Of course, its easy enough to dump the password hash out with a small
>> change to the SQL view, but you would probably not want to do this.
>>
>> See below for an example with a  small modification to your SQL view.
>>
>>
>> Regards,
>> Jason
>>
>>
>>
>>
>>    - "admin",
>>    - "$2a$10$wjLPViry3bkYEcjwGRqnYO1bT2Kl.ZY0kO.fwFDfMX53hitfx5.3C",
>>    - "Traore",
>>    - "John",
>>    - "someone@xxxxxxxxx",
>>    - "",
>>    - "2017-04-11 13:24:55.914",
>>    - "2013-04-18 17:15:08.401",
>>    - "false",
>>    - "MNCH / PNC (Adult Woman) program",
>>    - "ZyjSDLHGPv4"
>>
>>
>> On Tue, Apr 11, 2017 at 3:01 PM, Raminosoa Rabemanantsoa, Tantely <
>> traminosoa@xxxxxxxxxx> wrote:
>>
>>> Hi Harivola,
>>>
>>> Thank you very much for the SQL scripts querying the users information.
>>> The syntax is accepted by SQL View, but I am a bit encountering a blank
>>> result as illustrated by the attached file. I am wondering where I am doing
>>> wrong?
>>>
>>> Thank you for your help!
>>>
>>> Regards,
>>>
>>> Tantely.
>>>
>>>
>>>
>>> On Tue, Apr 11, 2017 at 3:38 PM, Harivola RANDRIANJAFY <harivolar@xxxxxx
>>> > wrote:
>>>
>>>> Tantely,
>>>>
>>>>
>>>>
>>>> Below the SQL View :
>>>>
>>>>
>>>>
>>>> SELECT
>>>>
>>>> "public".users.username,
>>>>
>>>> "public".userinfo.surname,
>>>>
>>>> "public".userinfo.firstname,
>>>>
>>>> "public".userinfo.email,
>>>>
>>>> "public".userinfo.phonenumber,
>>>>
>>>> "public".users.lastlogin,
>>>>
>>>> "public".users.created,
>>>>
>>>> "public".users.disabled,
>>>>
>>>> "public".userrole."name",
>>>>
>>>> "public".users.uid
>>>>
>>>> FROM
>>>>
>>>> "public".users
>>>>
>>>> INNER JOIN "public".userinfo ON "public".users.userid =
>>>> "public".userinfo.userinfoid
>>>>
>>>> INNER JOIN "public".userrole ON "public".userrole.userid =
>>>> "public".userinfo.userinfoid
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> Thanks,
>>>>
>>>> Harivola
>>>>
>>>>
>>>>
>>>> *De :* Dhis2-users [mailto:dhis2-users-bounces+harivolar=
>>>> psi.mg@xxxxxxxxxxxxxxxxxxx] *De la part de* Raminosoa Rabemanantsoa,
>>>> Tantely
>>>> *Envoyé :* lundi 10 avril 2017 17:19
>>>> *À :* DHIS 2 Users list <dhis2-users@xxxxxxxxxxxxxxxxxxx>; DHIS 2
>>>> Developers list <dhis2-devs@xxxxxxxxxxxxxxxxxxx>
>>>> *Objet :* [Dhis2-users] DHIS2 users list from SQL View
>>>>
>>>>
>>>>
>>>> Dear Community,
>>>>
>>>>
>>>>
>>>> I would like to output from SQL View a list of all DHIS2 users by using
>>>> headers like the information listed by the users details information, like
>>>> illustrated by the image below (inside red ellipse).
>>>>
>>>>
>>>>
>>>>
>>>> ​
>>>>
>>>>
>>>>
>>>> I am using DHIS2 2.24. I would like to check the users table fields but
>>>> I could not output any information from the following query
>>>>
>>>>
>>>>
>>>> select * from users;
>>>>
>>>>
>>>>
>>>> as trhere are some protected info.
>>>>
>>>>
>>>>
>>>> My question is in which fields should I base the SQL query to output
>>>> such information?
>>>>
>>>>
>>>>
>>>> Thank you for your support,
>>>>
>>>>
>>>>
>>>> Regards,
>>>>
>>>>
>>>>
>>>> Tantely
>>>>
>>>> ​
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> *This message and its attachments are confidential and solely for the
>>>> intended recipients. If received in error, please delete them and notify
>>>> the sender via reply e-mail immediately.*
>>>>
>>>>
>>>> <https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=emailclient> Garanti
>>>> sans virus. www.avast.com
>>>> <https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=emailclient>
>>>>
>>>
>>>
>>> *This message and its attachments are confidential and solely for the
>>> intended recipients. If received in error, please delete them and notify
>>> the sender via reply e-mail immediately.*
>>>
>>> _______________________________________________
>>> Mailing list: https://launchpad.net/~dhis2-devs
>>> Post to     : dhis2-devs@xxxxxxxxxxxxxxxxxxx
>>> Unsubscribe : https://launchpad.net/~dhis2-devs
>>> More help   : https://help.launchpad.net/ListHelp
>>>
>>>
>>
>>
>> --
>> Jason P. Pickering
>> email: jason.p.pickering@xxxxxxxxx
>> tel:+46764147049 <+46%2076%20414%2070%2049>
>>
>
> *This message and its attachments are confidential and solely for the
> intended recipients. If received in error, please delete them and notify
> the sender via reply e-mail immediately.*
>



-- 
Jason P. Pickering
email: jason.p.pickering@xxxxxxxxx
tel:+46764147049