API with non-administrative permissions
Original title: Cannot access API from within site pages if not Administrator.
If I login to an administrator account it all works fine, if I login to a non administrator account I get error 403 returned from a get Events API call.....
"Failed to load resource: the server responded with a status of 403 (Current token does not provide access to scope 'events_view'.)"
Code snippet is:
var EventsList = getDataFromApi("https://xxxxx.wildapricot.org/sys/api/v2/accounts/xxxxxx/Events?$sort=StartDate asc&$filter=Tags in [training,cruising,racing,racing_crew] AND StartDate ge 2017-01-01");
The API documentation here
"Access to Wild Apricot data will be limited by the access permissions of the currently authenticated user. Consequently, the API cannot be accessed within public pages that do not require user authentication."
The page in question is not a public page and the user is logged in (but not as an administrator), why are these API calls resulting in Error 403?
We are still working on “API for members”, however we already silently published beta version of it.
While building this API we tried to keep all important information in swagger format.
Help pages are not ready yet, so the only source of information is swagger spec. You can find swagger file here:
In order to play with API you could use swagger UI located here: https://api.wildapricot.org/content/swagger/?url=/ui/swagger/publicAccess or import swagger file into POSTMAN
Since the “API for members” is still in beta, Wild Apricot does not provide any kind of support for it (really, our support team is not ready for such questions yet). However development team carefully monitor this forum. If you have any questions regarding this API, please post your questions in this forum thread or as separate topic.
Allowing members to view and change registrations is good.
Our next big wave of registrations will come in December.
That does not help me as I am still waiting for a fix to my original post when I first raised this issue:
A member cannot do this as they have no access to the API if they are not an administrator.
Karl, what you're asking for is being handled in a different way - see https://forums.wildapricot.com/forums/308932-wishlist/suggestions/8825602-registrant-to-view-change-his-event-registrations
I am still waiting for this feature as well!
Do we have an updated ETA on this?
Our inability to provide our members with a list of events for which they've registered is causing some folks to recommend that we drop Wild Apricot and adopt another system.
API for non-administrators is in the closed beta testing stage right now. If you'd like to participate in it, please, write to firstname.lastname@example.org
We are expecting to publish it in the next major release, approximately in the end of July.
Is there any update on this functionality.
It is pretty important for some web pages if you want to be able to make any decent customisation.
I need to create a page for members that shows in a simple table all the events and who is registered on each event.
Did you have a chance to look at https://help.wildapricot.com/display/DOC/Authenticating+API+access+from+a+Wild+Apricot+site+page ?
A me, too comment. I've been trying to create a page that shows event registrations. My script works fine for admins (full and view-only), but receives a 403 error "Current token does not provide access to scope 'event_registration_view'.
Steve Riegel commented
Just adding my voice for this. I hope this means contacts/me will work for authenticated non-admin users so I can get the numeric id# for current user, and then call contacts/id# to obtain FieldValues struct. Thanks.
Hi team, is there an update on this -- the FieldValues structure is not available in the me scope even though the docs for Contacts API v2 indicates FieldValues is returned in the sample JSON call. This is a critical limitation that I hope will be changed very soon. This is restricting us from finishing a project for a customer.
Can you provide any idea as to when this will be available, will it be weeks or months for example?