Hey All.
I’ve been working with the API for PM Cloud.
Thanks to BT for making the Policy Editing API available for PM Cloud — it works great in this first iteration, but we do need some tweaks 🤔
I’ve created a ticket with BeyondTrust because I ran into a limitation and would like to hear everyone’s thoughts.
When creating applications through the API, we are limited to using “Product Description” as the unique identifier. This prevents us from uploading applications when multiple apps share the same Product Description, even though the File Name, SHA‑256, Product Name, Publisher, etc. are different. See the sample highlighted in purple below.
My view is that the only criterion that can guarantee a 100% certain duplicate is the SHA‑256 value. We need some additional logic to determine what should be classified as a duplicate. For example, if the File Name, Product Name, Product Description, and Publisher are the same for executables, but the versions differ, we could still classify them as duplicates.
Without using Product Description, we can create as many duplicates as we want, and the API won’t complain.
I’d love to hear your thoughts if you’ve worked with the PM Cloud API and adding application to your EPM policy.
BlacoUpload.xml is a EPM Policy file with allowed duplicates
Duplcate Issue.PDF is the ticket
SuccessCreation.csv is a sample that uploaded creating the BlacoUpload.xml from.
Kind regards
Jens
