ArcEnterprise User Role with JS API Editor Widget

Question

I'm working on an application that allows users to add a polygon to a feature service on our internal ArcGIS Server REST endpoint to report a water main break. It uses 'apply Edits'. If I want to allow everyone in our ArcEnterprise directory to report a water main break in this way do they have to have a Creator/Editor user role? We have a few hundred people in our organization so if we have to buy upgraded licenses for each person just to add a water main break polygon it wouldn't be financially feasible for us to swing it so the development time might not even be worth it.

JeffreyWilkerson · Answer

With an Online license I think you can generate the Client ID/Secret for test purposes.  Postman has a free version as well.  Then if you generated a JSON for modification to an existing record for a ArcGIS Online layer you could use Postman to get the Token, and then use it to POST to the REST applyEdits ().  You could test this by running it as yourself, logged in as just a Viewer, or even through an InCognito (Chrome) or InPrivate (Edge) window. Just for a proof of concept and to see how it operates.

https://developers.arcgis.com/rest/services-reference/enterprise/apply-edits-feature-service-layer-.htm

JustinKirtz1 · Answer

Thank you for the help, I'll look into this!

JeffreyWilkerson · Answer

Yes, I believe you are looking for using the Application Credentials through OAuth2 (https://developers.arcgis.com/documentation/mapping-apis-and-services/security/application-credentials/). You will need a Developers license (https://developers.arcgis.com/sign-up/) to create the ClientID and Client Secret by establishing a new application, then you can use those to generate a token.  For a quick test, if you have a tool like Postman (https://www.postman.com/) you can generate a POST call to the server to test getting the token, then try to access the REST endpoint for the data using this token.

Here's an example of jQuery code generated by Postman to generate a token from a client ID/Secret:

var form = new FormData();
var settings = {
  "url": "https://www.arcgis.com/sharing/rest/oauth2/token?client_id=xyz&client_secret=xxxxxxxxxxxxxxxx&grant_type=client_credentials",
  "method": "POST",
  "timeout": 0,
  "processData": false,
  "mimeType": "multipart/form-data",
  "contentType": false,
  "data": form
};

$.ajax(settings).done(function (response) {
  console.log(response);
});