User can not Create Entitiy if it is not Admin - Error 403 Forbidden

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • info@jaguarsoft.com
    Member
    • Apr 2015
    • 35

    User can not Create Entitiy if it is not Admin - Error 403 Forbidden

    Hi there,
    I use 3.7.0 and I've just seen that if User is not Admin, Can not Create entity, Error 403 message returns.
    i.e: I have own own own permissions for Accounts, But I can not create new Record,
    But if I set as Admin then I can create new Account.
    I Clear Disable / enable cache but no change ..

    Log;
    [2015-10-13 15:08:49] Espo.ERROR: API [POST]:/:controller, Params:Array
    (
    [controller] => Account
    )
    , InputData: {"assignedUserId":"55b8f36bcbc85f942","assigned Use rName":"Rengin Çaka","type":"Customer","industry":"Advertising"," commercial":false,"newsletter":true,"newsletter_en g":false,"teamsIds":["0"],"teamsNames":{"0":null},"name":"TestAcct","ema ilA ddressData":[{"emailAddress":"test@test.com","primary":true, "op tOut":false,"invalid":false}],"emailAddress":"test@test.com","website":"www. tes t.com","sicCode":"XXX","phoneNumberData":[],"phoneNumber":null,"billingAddressPostalCode": "", "billingAddressStreet":"","billingAddressState ":"" ,"billingAddressCity":"","billingAddressCountry ":" ","actFIRMAGOREV":"","actSEGMENT":"A++","actKA YNAK ":"","description":"","shippingAddressPostalCo de": "","shippingAddressStreet":"","shippingAddress Stat e":"","shippingAddressCity":"","shippingAddress Cou ntry":"","reNO":null} - [] []
    [2015-10-13 15:08:49] Espo.ERROR: Display Error: , Code: 403 URL: /api/v1/Account [] []

    thnxs & rgrds

    Selcuk
  • info@jaguarsoft.com
    Member
    • Apr 2015
    • 35

    #2
    But I can modify the exisiting records(accounts). fyi

    Comment

    • yuri
      Member
      • Mar 2014
      • 8440

      #3
      Will be fixed.

      Not it will work if you refresh your browser page after login as another user and clear local cache.
      If you find EspoCRM good, we would greatly appreciate if you could give the project a star on GitHub. We believe our work truly deserves more recognition. Thanks.

      Comment

      • info@jaguarsoft.com
        Member
        • Apr 2015
        • 35

        #4
        Hi, If you login with anaother user , cache keeps previous users ACL , So is there any easy way to clear cache always when login , any tiips/any lead appreciated,,
        my prod site screawed up at the moment. Not Stable..!

        Comment

        • yuri
          Member
          • Mar 2014
          • 8440

          #5
          Clear Local Cache and F5 (refresh browser) will clear your cached user id. It doesn't affect on server side, it's just client side so no reason to worry.
          If you find EspoCRM good, we would greatly appreciate if you could give the project a star on GitHub. We believe our work truly deserves more recognition. Thanks.

          Comment

          • yuri
            Member
            • Mar 2014
            • 8440

            #6
            You can upgrade to 3.7.2. The issue should be fixed.
            If you find EspoCRM good, we would greatly appreciate if you could give the project a star on GitHub. We believe our work truly deserves more recognition. Thanks.

            Comment

            • info@jaguarsoft.com
              Member
              • Apr 2015
              • 35

              #7
              Hi, upgraded to 372 but still I get 403 when creating new record. fyi InputData: {"assignedUserId":"55b8f36bcbc85f942","assignedUse rName":"Rengin Çaka","-----------------------------------------
              [2015-10-15 13:32:39] Espo.ERROR: Display Error: , Code: 403 URL: /api/v1/Account [] []

              Comment

              • info@jaguarsoft.com
                Member
                • Apr 2015
                • 35

                #8
                Hey, I found the problem if you dont assign'Deault Team' to a normal user, it can not create new record. On the right pane in the Create Form , Team appears as 'null', if you delete this null and assign Team
                it will save it suucessfully..
                So Default Team can not be empty etc.
                Just For Info

                take it easy,

                Selcuk

                Comment

                • yuri
                  Member
                  • Mar 2014
                  • 8440

                  #9
                  I think it's something different than you described. There should not be null. Maybe you had a default team selected for a user but removed that team record afterward.
                  If you find EspoCRM good, we would greatly appreciate if you could give the project a star on GitHub. We believe our work truly deserves more recognition. Thanks.

                  Comment

                  • info@jaguarsoft.com
                    Member
                    • Apr 2015
                    • 35

                    #10
                    I have imported users by my program ( import not supported bt Espo) and I am sure I set default team for Everybody with MassUpdate , so I think somebdy removed etc..

                    Comment

                    Working...