[#1458] getting access denied errors out of nowhere

Migrated from Redmine #1458 | Author: James Hilton-Barber
Status: New | Priority: Immediate, there is BUG! | Created: 2025-08-07


I am suddenly getting access denied errors on all RPC API endpoints I use. Things have run fine for a year, nothing changed. Error rates started spiking around 17:45 CET. Token issuing works fine but can’t access any resources with it.

Additonally, I tried turning the API feature on and off and regenerating keys → seems the new keys trigger a “Wrong API Key” error, despite clearly persisting in the Admin UI. The old ones still work fine…

result.error { code: -32600, message: ‘Access denied’, data: }

Redmine Admin wrote:

hi, what is your booking site url and which API endpoint you are using? Please make sure to use user-api.simplybook.it if your booking site is on simplybook.it and user-api.simplybook.me if your booking site is on simplybook.me