API with non-administrative permissions
Original title: Cannot access API from within site pages if not Administrator.
If I login to an administrator account it all works fine, if I login to a non administrator account I get error 403 returned from a get Events API call.....
"Failed to load resource: the server responded with a status of 403 (Current token does not provide access to scope 'events_view'.)"
Code snippet is:
var EventsList = getDataFromApi("https://xxxxx.wildapricot.org/sys/api/v2/accounts/xxxxxx/Events?$sort=StartDate asc&$filter=Tags in [training,cruising,racing,racing_crew] AND StartDate ge 2017-01-01");
The API documentation here
"Access to Wild Apricot data will be limited by the access permissions of the currently authenticated user. Consequently, the API cannot be accessed within public pages that do not require user authentication."
The page in question is not a public page and the user is logged in (but not as an administrator), why are these API calls resulting in Error 403?
We published our APIs on swaggerhub.
API for non-administrative access
The code provided in a topic will work for administrator only, since it makes a call to administrative API.
API for non-admins is located on different url and have slightly different syntax. Please refer to https://app.swaggerhub.com/apis/WildApricot/wild-apricot_api_for_non_administrative_access/1.0.0 for details.
Anon- I am trying to accomplish this same thing - a compact list of events published on the WA site. Would you mind sharing how you were able to achieve this? The code snippet wasn't enough for me. I tried support but was directed to use a partner instead. I'd like to try to figure it out on my own. Any help would be greatly appreciated. If you're a partner, maybe we can work something out. Let me know. I'm new to WA and didn't see a way to reach out to you directly. Thanks
Allowing members to view and change registrations is good.
Our next big wave of registrations will come in December.
That does not help me as I am still waiting for a fix to my original post when I first raised this issue:
A member cannot do this as they have no access to the API if they are not an administrator.
Karl, what you're asking for is being handled in a different way - see https://forums.wildapricot.com/forums/308932-wishlist/suggestions/8825602-registrant-to-view-change-his-event-registrations
I am still waiting for this feature as well!
Do we have an updated ETA on this?
Our inability to provide our members with a list of events for which they've registered is causing some folks to recommend that we drop Wild Apricot and adopt another system.
API for non-administrators is in the closed beta testing stage right now. If you'd like to participate in it, please, write to firstname.lastname@example.org
We are expecting to publish it in the next major release, approximately in the end of July.
Is there any update on this functionality.
It is pretty important for some web pages if you want to be able to make any decent customisation.
I need to create a page for members that shows in a simple table all the events and who is registered on each event.
Did you have a chance to look at https://help.wildapricot.com/display/DOC/Authenticating+API+access+from+a+Wild+Apricot+site+page ?
A me, too comment. I've been trying to create a page that shows event registrations. My script works fine for admins (full and view-only), but receives a 403 error "Current token does not provide access to scope 'event_registration_view'.
Steve Riegel commented
Just adding my voice for this. I hope this means contacts/me will work for authenticated non-admin users so I can get the numeric id# for current user, and then call contacts/id# to obtain FieldValues struct. Thanks.
Hi team, is there an update on this -- the FieldValues structure is not available in the me scope even though the docs for Contacts API v2 indicates FieldValues is returned in the sample JSON call. This is a critical limitation that I hope will be changed very soon. This is restricting us from finishing a project for a customer.
Can you provide any idea as to when this will be available, will it be weeks or months for example?