Open
Description
This is low prio, as long there are no OKAPI methods for preparing new caches (e.g. #440) or for OC admin functions.
Generally, current OKAPI versions do not allow to access nonpublic (unpublished, blocked etc.) and semipublic (OCDE locked) caches. There are a few exceptions, not intentionally but by accident:
- All log image methods work with logs & images of nonpublic caches.
- Logs of nonpublic caches can be deleted.
There would be no point in protecting that, because it all is allowed (for the log authors) on the OC websites.
Implementation idea for full owner access:
- Add a
status2
field for geocaches, which supports all the new status. - Enable them in the geocache and log retrieval methods for L3-authentified owners. (Grep OKAPI source code for "1,2,3"!) Add access tokens to some more internal calls of those methods.
- Add the new status values to the status logging logic.
- Map them to some GC types in GPX, e.g. 'Locked' to 'Archived' and all the other to 'Temporarily unavailable'.
- Take care that no OCPL fakeusers can access nonpublic data - fix Add a user ID paramter to services/caches/map/tile to query other users' maps #496.