Discussions
REST API: Non-admins unable to see organization information
We are running iMIS version 20.3.30.4688 and using the REST API and SSO.
I am able to get a correct access token for a non-admin user and am able to make requests as the user about their own information, however any requests to get information about their organization results in a "Does not have required permission. (O)" message from the API.
If the access token is for a user that has organization admin role, the request works. If the access token is for a non-admin user the request responds with the message above.
I would understand this response if we were trying to update the company, but this is just to get the company information.
The endpoint I am making the request to is:
GET https://isa.imiscloud.com/api/Party/:PartyId
And getting the text string response:
Does not have required permission. (O)
I thought this may have something to do with possible permissions or visibility on the Party, but didn't find anything that would seem to fix it.
Thanks!
Brian