Cannot access API from within site pages if not Administrator.
If I login to an administrator account it all works fine, if I login to a non administrator account I get error 403 returned from a get Events API call.....
"Failed to load resource: the server responded with a status of 403 (Current token does not provide access to scope 'events_view'.)"
Code snippet is:
var EventsList = getDataFromApi("https://xxxxx.wildapricot.org/sys/api/v2/accounts/xxxxxx/Events?$sort=StartDate asc&$filter=Tags in [training,cruising,racing,racing_crew] AND StartDate ge 2017-01-01");
The API documentation here
"Access to Wild Apricot data will be limited by the access permissions of the currently authenticated user. Consequently, the API cannot be accessed within public pages that do not require user authentication."
The page in question is not a public page and the user is logged in (but not as an administrator), why are these API calls resulting in Error 403?
We faced some issues during beta tests, so release of the API for non-administrators shifts to the Q4.
If you’d like to get an early access, you can join to the beta tests. To do so, please, write to firstname.lastname@example.org
Allowing members to view and change registrations is good.
Our next big wave of registrations will come in December.
That does not help me as I am still waiting for a fix to my original post when I first raised this issue:
A member cannot do this as they have no access to the API if they are not an administrator.
Karl, what you're asking for is being handled in a different way - see https://forums.wildapricot.com/forums/308932-wishlist/suggestions/8825602-registrant-to-view-change-his-event-registrations
I am still waiting for this feature as well!
Do we have an updated ETA on this?
Our inability to provide our members with a list of events for which they've registered is causing some folks to recommend that we drop Wild Apricot and adopt another system.
API for non-administrators is in the closed beta testing stage right now. If you'd like to participate in it, please, write to email@example.com
We are expecting to publish it in the next major release, approximately in the end of July.
Is there any update on this functionality.
It is pretty important for some web pages if you want to be able to make any decent customisation.
I need to create a page for members that shows in a simple table all the events and who is registered on each event.
Did you have a chance to look at https://help.wildapricot.com/display/DOC/Authenticating+API+access+from+a+Wild+Apricot+site+page ?
A me, too comment. I've been trying to create a page that shows event registrations. My script works fine for admins (full and view-only), but receives a 403 error "Current token does not provide access to scope 'event_registration_view'.
Steve Riegel commented
Just adding my voice for this. I hope this means contacts/me will work for authenticated non-admin users so I can get the numeric id# for current user, and then call contacts/id# to obtain FieldValues struct. Thanks.
Hi team, is there an update on this -- the FieldValues structure is not available in the me scope even though the docs for Contacts API v2 indicates FieldValues is returned in the sample JSON call. This is a critical limitation that I hope will be changed very soon. This is restricting us from finishing a project for a customer.
Can you provide any idea as to when this will be available, will it be weeks or months for example?