I've totally forgot about the fact that we have the API that returned the content of the attachments.  I'm now using this API.

The disadvantage of this model is that the attachment has to be streamed from MantisBT to MantisTouch and then to client.  This is exactly the scenario where cloud services avoid by having a web app provide the browser with a signed url that the browser can use to get the media (e.g. video) from the blob storage directly without streaming through the web app (in case of download).

Anyway, I'm good.  I've submitted a bunch of pull requests and deployed the new plugin on our bug tracker.  Roland, anonymous access to our instance via MantisTouch (http://mantisbt.mobi) should now be working as per your request, including downloading attachments.

Thanks for the feedback.

> From: paul@mantisforge.org
> To: mantisbt-dev@lists.sourceforge.net
> Date: Fri, 11 Apr 2014 19:13:16 +0100
> Subject: Re: [mantisbt-dev] Redirecting to MantisTouch via a Plugin
> > > One more thing, I discovered that there needs to be a change to SOAP
> > > API to make this scenario and any client access to attachments work.
> > >
> > > At the moment, the soap api returns a url that looks as follows:
> > > http://www.example.com/mantisbt/file_download.php?file_id=123&type=bug
> >
> > Why not use mc_issue_attachment_get ? It's what I do for instance in the
> Eclipse plugin and it's completely hassle free.
> >
> > Robert
> Robert's suggestion would seem to be the correct way to handle it.
> I could imagine a scenario where you could create an application based
> around the SOAP api that ran as a different user to the end-user. I'm
> thinking the equivalent of 'run as' in windows.
> Therefore, having the SOAP api return a URL that could send a user to a
> logon page would seem to be the correct behaviour. As Robert says, if you
> are getting the attachment information via the SOAP API, then it's probably
> create to then access it via the SOAP api, rather then trying to mix
> authentication methods.
> ------------------------------------------------------------------------------
> Put Bad Developers to Shame
> Dominate Development with Jenkins Continuous Integration
> Continuously Automate Build, Test & Deployment
> Start a new project now. Try Jenkins in the cloud.
> http://p.sf.net/sfu/13600_Cloudbees
> _______________________________________________
> mantisbt-dev mailing list
> mantisbt-dev@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/mantisbt-dev