Feature #25038
openEnable Redmine REST web service
0%
Description
I'd like to use Redmine's REST API to script interactions with the tickets I file here—posting notes, querying status, integrating with local tooling. The user account UI at /my/account doesn't expose an "API access key" section, which means Enable REST web service is currently off under Administration → Settings → API. Could that setting be turned on?
What This Enables¶
Once REST is on, every user on this instance gets the option to mint a personal API key (per-user, respects existing role permissions). That unlocks:
- Scripted note-adding. Post follow-ups to tickets from a CLI or local tool without browser context-switching.
- Bulk queries. Pull the state of multiple tickets in one call instead of opening each in turn.
- Workflow integration. Reference ticket IDs in commit messages, status digests, or dashboards automatically.
- Reproducible diagnostics. Attach machine-collected output (logs, headers, timestamps) as part of a scripted reproducer.
Security Posture¶
Redmine's API key is per-user and inherits that user's existing role/permissions, so enabling REST doesn't grant new privileges—it just exposes the same capabilities through a second interface. Keys are user-resettable from /my/account, so revocation is self-service if a key leaks.
Updated by Boone Gorges 2 days ago
Hi Raffi - Just wanted to note that I received this request. I've got to talk to GC IT, who are responsible for maintaining this Redmine installation, about whether there are concerns with turning it on. I don't personally see any problems doing so, but they may be risk-averse due to recent DoS attempts against this site. I'll circle back when I have more.