Open link in a new tab

Content

Expand project menu

API filter roles by id return unauthorized 403, but I can retrieve all the results

Environment:

Docker distributed installation

OP version: OpenProject 11.1.2 (PostgreSQL)

As administrator I got my API token. I am using it in different scenarios. Now I as trying to get information by a given role.

I tested the endpoint /api/v3/roles and /api/v3/roles/{1}

The first one returns 200 and in the body I got all the results

The second one return 403 with body message

{

"_type": "Error",

"errorIdentifier": "urn:openproject-org:api:v3:errors:MissingPermission",

"message": "You are not authorized to access this resource."

}

I attach the postman results