Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[BUG] Remove permission requirements for survey APIs #29

Open
dobromirdobrev opened this issue Oct 30, 2023 · 0 comments
Open

[BUG] Remove permission requirements for survey APIs #29

dobromirdobrev opened this issue Oct 30, 2023 · 0 comments
Labels
bug Something isn't working

Comments

@dobromirdobrev
Copy link

Describe the bug
An admin user is not able to load surveys when creating an event in the Admin app. This issue is related to: https://github.com/rokwire/illinois_admin/issues/397

To Reproduce
Steps to reproduce the behavior:

  1. Go to https://api-dev.rokwire.illinois.edu/admin-web/#/
  2. Sign in
  3. Select "Illinois" application and hit "Continue"
  4. Click on "Events Calendar" -> "Create" event
  5. Click on "Event Follow-Up Survey"
  6. See the error

Expected behavior
The surveys are loaded successfully.

Please remove the required permissions for the APIs:

So that these APIs do not require permissions similar to the Client APIs.

Additional context
The problem is that the admin user does not have permissions to load the surveys: get_surveys, updated_surveys, delete_surveys or all_surveys. In result the API https://api-dev.rokwire.illinois.edu/surveys/doc/ui/index.html#/Admin/get_api_admin_surveys returns 403 Forbidden:

Request:
GET: https://api-dev.rokwire.illinois.edu/surveys/api/admin/surveys?types=template.event_follow_up

Response:

403 Forbidden

{
  "message": "Error validating request: error validating permission",
  "status": "forbidden"
}

The result would be the same when creating, updating or deleting a survey.

@dobromirdobrev dobromirdobrev added the bug Something isn't working label Oct 30, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

1 participant