POST
|
I was testing the use of the API Key functionality for conducting python automation via the arcgis python api and I expected API Key privileges to apply. However, testing indicated API key privileges were following the user role that owns the key, not the privileges set in the key itself. I'm wondering if there is a bug in the Arcgis API or if I am missing something? Testing steps: Using ArcGIS Online, I created an API key to test allowing access to organization resources via an automation script. I gave the key one privilege: Admin>Content>View all. This also automatically selects the additional privileges: General>Members>View; General>Content>View content shared with organization; Admin>Members>View all. A referrer url was not designated. The test used arcgis python api version 2.3.0.3. After using gis = arcgis.gis.GIS(api_key="*KEY*”) to authenticate, I was able to retrieve content as expected. However, I was also able to add records (using layer.edit_features(adds=itemList)) which I did not expect. I tried this with an editable feature layer I own and a non-editable layer another account owned. My account role includes General>Features>Edit with full control, so I assumed the API Key was using my user role privileges. To test this, I logged on as a test user with a similar role and created an API Key with the same privileges as described above. The editing capability was available and I was able to add records to the two layers as previously described. I then changed the test user role to only allow General>Content>Create/Update/Delete. The API Key authenticated. As expected, I could not query items from the other accounts. I updated the test role to include Administrative>Content>View All. The data could now be queried as expected. However, the edit test again allowed me to add data to both feature layers. When logged on as the test user directly to AGOL, I was able to manually edit the data for the editable layer, but not for the non-editable layer. I examined Privileges | Documentation | Esri Developer to learn about the scope. It appears that the AGOL Portal Service privileges have personal scope “that require additional permissions from your account to perform operations.” However, in this case it seems the privileges for the API Key are being overridden by the user role permissions not enabled by them. When using the arcgis python api, it is not adhering to the privileges of the API Key, nor is it adhering to the privileges of the user role. This test would suggest if I set up an API Key as an administrator, any workflow using that key via the python api can conduct any action on my site regardless of the privileges in the key. Obviously that is not great.
... View more
a week ago
|
0
|
0
|
153
|
POST
|
@RobertBlashadmin , the code needs the line "from IPython.display import display". The pandas section is formatting the results for improved readability and so it could be copy/pasted into a spreadsheet. Alternatively, you could simply print the problem_apps_sorted list. -- Realize this is an old post, but in case others stumble with this as we near the end of the deprecation period.--
... View more
3 weeks ago
|
0
|
0
|
41
|
IDEA
|
@MichaelVolz - Correct, once a named user logs in, their Pro licensing is active. However, after appx 2 weeks the named user will be timed out/ logged out. At that point Pro is no longer licensed to run any process using Pro resources (e.g. arcpy) and tasks will fail. @SimonSchütte_ct - Offline licensing is an option, with a timeout or until license/subscription end dates. In these posts (Taking ArcGIS Pro Offline - Esri Community, Solved: ArcGIS Pro offline license timeout - Esri Community) this is discussed, however both note offline licenses being lost or corrupted (Error: Failed to Return the Offline License.). Experience with lost licenses prompted our use of single use licensing. Related Posts: arcpy - Reactivate ArcGIS named user license for use with Task Scheduler scripts using Python - Geographic Information Systems Stack Exchange @Tom_Laue describes a similar need and Esri Support response in the comments of: Solved: ArcGIS Pro Runtime Error: the product license has ... - Esri Community @DavidSolari also references this need in: Solved: Scheduling Tasks That Access Portal Data - Esri Community
... View more
08-15-2025
10:12 AM
|
0
|
0
|
484
|
IDEA
|
Automation workflows on dedicated scheduled task machines running ArcGIS Pro suffer from named user authentication time outs. To avoid the task user being timed out, the current suggestion is to use a dedicated single use license. With the move to named user/user type licensing, we need a method that will allow the task user to re-log in or remain logged in to ArcGIS Pro. Ideally, this would be made possible via a programmatic process that could work with any scripted workflow conducted on the task machine. Benefits Scheduled task user will remain logged in to the task machine to provide uninterrupted capability Named user user type/ licensing will allow the same licensing model to be applied to all organization users
... View more
08-14-2025
04:17 PM
|
16
|
4
|
605
|
POST
|
@David_McRitchie can you provide any additional details about the "issues from Enterprise 11.3-11.4 on deployments that have custom registered folders or databases involving the shared instance pool"?
... View more
08-13-2025
11:30 AM
|
0
|
1
|
517
|
POST
|
@Martin1 Do you know if you have DynamicMappingHost ArcSOCs that are not being cleaned up? We have this same issue, which I am currently working with support on. I realized that over time our system became less stable. Even though the DMHost has a 24 hour recycle interval for midnight and 8 maximum instances, there more than 8 ArcSOCs in the task manager associated with the DMHost service. There are 8 from today as I would expect, but 3 extra from prior days. Our DEV environment has even more orphans consuming even more memory. We have been having to reboot the server to 'fix' our problems and I believe this may be the fundamental cause. It seems rebooting may be something other are doing as well per Solved: Server service needs restarted every 7 days or so - Esri Community.
... View more
08-01-2025
10:33 AM
|
2
|
0
|
379
|
IDEA
|
@CraigGillgrass if Esri is "working on moving the capabilities in the Web Editor into the Editor widget within Map Viewer" does that mean Web Editor will be removed as an app once capabilities are moved?
... View more
04-08-2025
01:10 PM
|
0
|
0
|
640
|
POST
|
Was recently testing web editor functionality with the mobile and contributor user types and had the same question @Scott_Sambell . Another recent idea Web Editor functionality inside normal Web Map? - Esri Community had a response by @CraigGillgrass that indicated "moving the capabilities in the Web Editor into the Editor widget within Map Viewer". It isn't clear if that means the Web Editor app will only exist in the short term until its functionality is incorporated into the Map Viewer.
... View more
04-08-2025
01:07 PM
|
0
|
0
|
894
|
POST
|
If you have experienced the Problem: Starting ArcGIS pro Returns a System Clock Error after Upgrading to ArcGIS pro 3. the following is a solution that may work and may not require contacting Esri support. We have ArcGIS Pro 3.3.1 installed on a windows virtual machine with a Single Use license. The system clock error appeared after having to revert our machine using a snapshot after a windows update failure. Prior to reverting, the Pro install and licensing worked. It was not caused by upgrading, in contrast to the post above. After reverting to an earlier VM snapshot the clock error appeared ("The system clock is incorrect. Please set your clock to the current date and time."). In addition we could not Authorize ("All requested features have already been authorized on this machine") or Deauthorize ("There are no Single Use licenses to deauthorize on this machine") the licensing. Setting the clock did not clear the error. A full uninstall and reinstall did not clear the error. Esri support helped fix this but nothing needed to be done by support staff. As the post indicates there is an issue in FlexNet. To fix, we canceled our existing Single use license and created a new Single use license; deleted the C:\Program Files\FlexNet folder; opened Add/Remove Programs and ran a Repair on ArcGIS Pro. After the repair the clock error disappeared and we were able to use the new Single use license to authorize the software.
... View more
02-25-2025
03:40 PM
|
1
|
0
|
831
|
POST
|
We included a logo on the splash screen of a new dashboard and added a URL link to our agency web page. There is a border around the logo that is visible upon loading the splash screen and disappears if the user clicks anywhere. The border seems to be associated with adding an Image URL to the logo in the splash screen configuration. If the logo does not include a URL, the border does not appear on the logo, but shifts down to the next weblink on the screen. In this case the link to the fishing regulations. We also have a button to reopen the splash screen once the user clicks OK. When reopened the border is not visible. Once the page is refreshed, the border reappears. This border highlights the "active cursor" since if you click enter without clicking the mouse the link to the page is activated. It seemed this might be related to Web Content Accessibility however, there is nothing on the Dashboard Splash Screen help indicating this. Is this expected behavior?
... View more
02-04-2025
03:41 PM
|
0
|
1
|
403
|
POST
|
@vijaybadugu I'm not entirely sure what you are asking. However, I also recently wanted to test webhook functionality. I have found a bit of a delay in this process. My experience using Create a hosted feature service webhook follows. Hope it helps. I created a webhook on a feature service using the FeaturesCreated action. For the HookURL I used, Svix Playground a free webhook testing site to create a unique playground with its own token On creation, the playground registered an immediate get request, which I assume is Esri validating the url I then created a series of features in my feature class Timing for the webhook post to show up in the playground ranged from 2 to 10 minutes. The playground response body is blank, so the webhook notificationStatus page logged a Server Response = No Content; The time for this notification to show up on the notificationStatus page ranged from 20 to 30 minutes. The timestamps on the notificationStatus page can be converted using: Epoch Converter - Unix Timestamp Converter From the playground you can evaluate the changesUrl. Following the steps in the above "Create a...webhook" link, you can follow the changesUrl to the statusUrl and download the json via the resultsUrl One other note: in working through testing to a secure internal, and therefore inaccessible, hookUrl the notificationStatus took quite long time to show Invoked Successful? = No and Server Response = The remote name could not be resolved: *serverURL*
... View more
02-03-2025
02:59 PM
|
0
|
0
|
336
|
IDEA
|
@JanPieterBoerden This idea would eliminate confusion and assist in troubleshooting as noted in this post Solved: Re: ArcGIS Online Webhook "notificationStatus" rel... - Esri Community. Update: I still think this is a good idea, however in the interim, I did comment here (Re: Webhook Tester using Survey123 - Esri Community) on using a webhook testing site to learn more about the black box.
... View more
01-31-2025
02:19 PM
|
0
|
0
|
265
|
POST
|
@WilderNiss1 Yes, that is my understanding. I don't have time to look into it/test right now but my approach to nested functions that are being difficult is stepwise testing. If you create a series of test S123 fields you can verify each set of choices at the most nested level first. Once that works, then copy it up to the next level in a new field, and repeat until the top or most outermost level is reached. Usually, these types of syntax errors have a simple solution, but looking at them all makes them hard to decipher.
... View more
01-31-2025
09:08 AM
|
1
|
0
|
526
|
POST
|
@WilderNiss1 Your OR statements are mixed. In your first lines you use (${deliberate_new_nest} = "unk" or "no") which is a list of values separated by or . The last lines use (${deliberate_new_nest} = "unk" or ${deliberate_new_nest} ="no"). I think S123 may require the later approach where each value is preceded by the @{field}= .
... View more
01-30-2025
04:26 PM
|
2
|
2
|
567
|
POST
|
@coryeicher It appears that the notifications are for failures: Notification Status | ArcGIS REST APIs | ArcGIS Developers . If your webhooks are performing then it seems this is expected. For troubleshooting it would be nice if the notification status could be set to log successes and have a log size setting.
... View more
01-30-2025
03:48 PM
|
0
|
1
|
532
|
Title | Kudos | Posted |
---|---|---|
16 | 08-14-2025 04:17 PM | |
2 | 08-01-2025 10:33 AM | |
1 | 08-20-2024 08:59 AM | |
1 | 02-25-2025 03:40 PM | |
1 | 01-31-2025 09:08 AM |
Online Status |
Offline
|
Date Last Visited |
Tuesday
|