Oh, I’m rather ignorant today, I focused on “web services” and didn’t understand what you really wanted.
If you just use the API to communicate with the database (as opposed to directly managing the database), do you really need to authenticate as any user?
In the 3.2 source tree, for example, look at merge-users.pl , which uses Bugzilla::User objects. Could you do the same with Bugzilla::Component ?
You should also look at sanitycheck.pl , which uses Bugzilla->set_user .
source share