[#844] getClassesList($filter) result access denied

API General
,
1

Migrated from Redmine #844 | Author: Aaron Chen
Status: New | Priority: Normal | Created: 2022-02-15

under: company public service (public gettoken)
use: getClassesList($filter)

get
token: 023f57789e56d6de286149cb5cae9eed7385e5c1310110cd9f79084d01871a2e

but
result: Access Denied
error: {“id”:“1”,“error”:{“code”:-32600,“data”:,“message”:“Access denied”},“jsonrpc”:“2.0”},

2

Redmine Admin wrote:

please provide raw http requst and api endpoint

3

Aaron Chen wrote:

<200,{error={code=-32600, message=Access denied, data=}, id=1, jsonrpc=2.0},[Server:“nginx”, Date:“Tue, 15 Feb 2022 10:36:21 GMT”, Content-Type:“application/json; charset=UTF-8”, Content-Length:“86”, Connection:“keep-alive”, Keep-Alive:“timeout=20”, Access-Control-Allow-Origin:“*”, Access-Control-Allow-Methods:“POST, GET, OPTIONS”, Access-Control-Allow-Headers:“content-type, x-company-login, x-application-token, x-user-token, x-token, x-requested-with”, X-XSS-Protection:“1; mode=block”]>

4

Redmine Admin wrote:

this is not request to our API but response… unfortunately there is no way to see what is wrong without raw http request to API

5

Aaron Chen wrote:

X-Company-Login sangharetreat
X-User-Token c1d6c48806463a620836debd56bded34c72522f93a1bd44e8629468f9e05c5df

6

Redmine Admin wrote:

this is not request to getClassesList method

7

Aaron Chen wrote:

access denied problem we have solved. BTW, what is the API differents between public service and administration service? we used administration getclasslist API, the results not include the any services information. we changed the getclasslist to public API, it’s worked(services information returned).