Document required permissions

[svenwanzenried]

Which permissions does the API user need to run paperless-gpt?
Maybe this should be documented in the README

[BoBBer446]

I don't understand that. You create an API key for your user. This means that the request takes place in the context of your user.

The user must of course have owner rights. Because the user / paperless-gpt must have the rights to edit the documents via API.
At least tags, titles.

If this does not answer your question, please make it precise. Maybe I can think of something.

[svenwanzenried]

Yes, I create API user, generate Token. That is clear. But I want to give this user as few permissions as possible (this is best security practice). So therefore I try to figure out, what the minimum Set of permissions is. As it's not documented, I started with most permissions and the gradually reduced it. I currently use this:

This works, but I wonder if e.g. user and group is really necessary. Therefore it is my suggestion to document which permissions are actually needed. Other applications out there using the Paperless API do specify that (e.g. paperless-ngx-postprocessor).

[BoBBer446]

Ah okay. Good Point. I think add and view
I will check it on my own today. Interesting point