Great concept, seems to work well!

Hi @thedaveca ,
I don’t understand the reason of 2 stars review. These permissions are required from Cloudflare. If it were up to me, I wouldn’t ask for any permission.

I hope you understand and want to reward a job – totally free – by reviewing your opinion.

Bye!

My Cloudflare account has access to 5 accounts and ~30 sites, and I’m very conservative about the permissions I grant due to the risk of one site damaging another site, so with this in mind, these are the permissions I would like to give:

https://cdn.razx.com/file/razx-cloud/temp/cloudflare-permissions-1.png

This would provide access only to the needed zone, without providing access to anything else, but it seems to fail unless I grant permissions to at least all sites within the account, which is already wider permissions than I can safely grant.

Did I miss something obvious here?

I understand what you mean and I agree with you but if you try to set the permissions for a single zone only, as you did, the Cloudflare APIs don’t work. It is not a limitation of this plugin but of Cloudflare.

You can create a token with the permissions you prefer. The plugin will use it. But the problem lies in the Cloudflare API.

What is the API call that fails in this configuration? It’s been a while since I tested, but my notices indicate we have a cache clearing API call that uses a token that has no access to do anything but clear one site’s cache.

It should be the API for retriving zones. It is a known issue also discussed on the Cloudflare forum

• This reply was modified 4 years, 6 months ago by Salvatore Fresta.

This is the bug: https://community.cloudflare.com/t/bug-zone-detail-by-name-requires-zone-list-permission/128042/12

From what I can tell, and I will note I’m not near a computer, but this seems to be limited to zones?name= queries and is not a factor if you call the zone by ID.

I’ll dig into this further as time permits.

According to the Cloudflare discussion thread, Cloudflare seems to be making some progress on this topic. Does this help here?

Nice! I will release the new version in few hours so you can use the token access restricted to a single zone ??

Hi @thedaveca ,
try version 4.1.3. Start from scratch. I have tried it on my site and it works like a charm. Let me know ??