Skip to main content

Hello,

Is it possible to obtain an API token to be able to programatically enter my attendance and absence?
It is important the API token allows only entering / retrieving my time tracking data and not the ones from my coworkers.

I was reading the Personio Developer Hub and went through the API description, but it seems the API allows setting attendance for any employee, not only for myself.

The use case for my request is that I would like to automate entering the hours for myself because it’s cumbersome to use the UI each time.

Is there a way with the current implementation of the API?

Hello ​@wopi ,

 

apologies for the late reply.

 

It is true that you cannot restrict the API to only work for your employee ID. But, as you would need the API credentials (see https://support.personio.de/hc/en-us/articles/4404623630993-Generate-and-manage-API-credentials), you can just create credentials and only use them for your employee ID or not share it with non-admins.

 

Hope that helps a bit.

 

Best regards,

Andreas

Hi ​@Andreas Görthofer,

This is a horrible advice.

API keys should be restricted by scope, and keys should not be managed on people’s trust or gut feeling. Several accidents from the past are the proof of that.

I don’t understand how I should even create a key as a non-admin, or obtain one from somebody with admin rights. If the API is really so badly designed as you have described, then if the admin is doing his job seriously, he will never give me any API key.

Which is a shame, because that means I’m bound to this mediocre UI for longer.

Thanks anyway for your response.

Best,
Wojciech

 

Hello ​@wopi ,

 

so yes, the current system behaviour is the following:

 

You can add a feedback / feature request for this limitation to our product team within your Personio account via Help & Feedback > Give feedback.

 

Thank you for your understanding!

 

Best regards,

Andreas

Your reply


Terms & Conditions of the Personio Voyager Community