Hi,

I have written JavaScript/HTML in a WildApricot site page to display events as a compact list in a table.

If I login to an administrator account it all works fine, if I login to a non administrator account I get error 403 returned from a get Events API call.....

"Failed to load resource: the server responded with a status of 403 (Current token does not provide access to scope 'events_view'.)"

Code snippet is:
<script>

generateTable();

function generateTable()
{
var EventsList = getDataFromApi("https://xxxxx.wildapricot.org/sys/api/v2/accounts/xxxxxx/Events?$sort=StartDate asc&$filter=Tags in [training,cruising,racing,racing_crew] AND StartDate ge 2017-01-01");

The API documentation here
https://help.wildapricot.com/display/DOC/Authenticating+API+access+from+a+Wild+Apricot+site+page
Says
"Access to Wild Apricot data will be limited by the access permissions of the currently authenticated user. Consequently, the API cannot be accessed within public pages that do not require user authentication."

The page in question is not a public page and the user is logged in (but not as an administrator), why are these API calls resulting in Error 403?

Thanks

Site Admin will grant access to a specific WA page for each Group Leader.
-- On this page will be a form Nicasio creates using WordPress and a
form plugin.
-- If more groups are added or changed, Nicasio would need to
add/update these forms for the Site Admin (or walk the Site Admin
through how to set these up).

The form will include the standard email fields (subject, and body, as
from and to fields will be auto-populated behind the scenes).
-- The from address will be set to the group leader's email within the
form's settings (a Site Admin or Nicasio would need to edit this if
changes are needed).
-- The to address(es) will be loaded via a custom WA API script
Nicasio creates that pulls all email addresses from members within the
specific group being sent to.

The WordPress site and form will need to be hosted where client chooses.
-- The forms will then be iframed/embedded into the group leader pages
mentioned above.

The WordPress site will not meant to be accessed directly and should
probably be blocked unless visiting from within the iframed page while
on one of the Wild Apricot group leader pages.
-- The WordPress site will be streamlined/stripped down to only show
the forms so any other content would be added to the Wild Apricot
pages.

To complete the items mentioned above we estimate this at roughly 25 hours of work.

1- First thing you need to secure is access to is your domain’s DNS settings or Zone Files. If you run a query at say DNS STUFF.Com – you can find out where your DNS is hosted: dnsstuff.com

Notice that in the Parent section our public Name Servers listed as follows:
emily.ns.cloudflare.com. | 173.245.58.155
buck.ns.cloudflare.com. | 173.245.59.78

So for our website CloudFlare.Com is where we host our DNS.

2- Next, go to the Wild Apricot custom domain setup article < Click Here >
Once in your DNS Zone Files, you will need to edit the following files:
A) CNAME
Name: www
Value: sites.wildapricot.org

B) A record
Name: YourDomain.com
Value: 96.43.192.222

C) TXT record
Name:YourDomain.com
Value: v=spf1 mx include:wildapricot.org ~all

3- Finally, you will need to set custom domains in the Wild Apricot settings for both www and non-www YourDomain.Com. You’d need to decide which of the two would be your primary or default primary.

One thing to keep in mind is your MX or Email DNS Zone Files. As you may or may not know, Wild Apricot does not host or provide mail boxes/emails for your domain. So, please keep this in mind – so that you can either keep your existing Email provider or find a new one.