planningcenter / developers

Planning Center API docs and support
https://developer.planning.center/docs/
85 stars 8 forks source link

Question about error 403 #1184

Closed jfloPMM closed 5 months ago

jfloPMM commented 5 months ago

Related Product Which product is this question related to?

People

Describe the question When we return results to Planning Center for Cithc Church Madison, Inc to https://api.planningcenteronline.com/people/v2/people/118629328/background_checks we sometimes get an error : {"errors":[{"status":"403","title":"Forbidden","detail":"You do not have access to this resource","meta":{"description":"User with id 113016611 cannot read AppGraph::V2023_03_21::Vertices::BackgroundCheckVertex collection."}}]} and the user who ordered the report is an admin in her account with access to the background check badge area

What have you tried that worked? We can resend the report to the customer and it appears to update in Planning Center correctly.

What have you tried that didn't work?

Additional context Is there something on our end we need to correct to avoid getting this error? I didn't see anything in the API to indicate what triggers it or why it would be an intermittent issue.

I have..

shanebonham commented 5 months ago

Hi @jfloPMM,

Can you verify that the user used for those requests has background check permissions as described here? https://pcopeople.zendesk.com/hc/en-us/articles/1260803163789-Background-Check-Permissions

jfloPMM commented 5 months ago

Faith Dillinger said she did when she set up the account, but her HR manager now wants to review and approve all background checks now and she is just able to view the badge but not the details. Do we need to revoke the token and have the HR person authenticate the account and then Faith can just log in and order from our system and have reports return to Planning Center under the person who authenticated the account? Or does the person placing the order always need to have all permissions in PCO?

Jennifer Fowler ministrybrands.comhttp://www.ministrybrands.com/ @.***

From: Shane Bonham @.> Sent: Wednesday, April 24, 2024 3:00 PM To: planningcenter/developers @.> Cc: Jennifer Fowler @.>; Mention @.> Subject: Re: [planningcenter/developers] Question about error 403 (Issue #1184)

CAUTION: This is an external email. Please use caution with links and attachments.

Hi @jfloPMMhttps://github.com/jfloPMM,

Can you verify that the user used for those requests has background check permissions as described here? https://pcopeople.zendesk.com/hc/en-us/articles/1260803163789-Background-Check-Permissionshttps://pcopeople.zendesk.com/hc/en-us/articles/1260803163789-Background-Check-Permissions

— Reply to this email directly, view it on GitHubhttps://github.com/planningcenter/developers/issues/1184#issuecomment-2075632400, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AXVREZTL34QQETP3HAVVRDLY676KFAVCNFSM6AAAAABGXNRH4WVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDANZVGYZTENBQGA. You are receiving this because you were mentioned.Message ID: @.**@.>>

mcfadden commented 5 months ago

Hi @jfloPMM,

Every API request made to Planning Center is made on behalf of a user. If the permissions of a user change, the permissions of their API authentication also change. This could explain why you now are getting 403 (Forbidden) errors for this user.

Unfortunately, we're not able to provide help in desigining the systems that integrate with our API. If you are interested in talking to others who integrate with our API you may want to ask in the #api channel in the Planning Center User Community Slack.

If you have questions that the API documentation doesn't answer, feel free to open a new issue here.

If you have questions about our products you can review the documentation or reach out to our support team at http://support.planningcenteronline.com