All API calls now getting "You are not permitted to view the requested resource"

support
#1

I have changed nothing. All of a sudden all of my api calls are getting the api error: “You are not permitted to view the requested resource”. I even renewed my api keys and I have set the api users to have maximum privileges. Why is this happening all of a sudden??

1 Like
#2

Are you using HTTP Headers for the API key?

4 Likes
#3

Yes, I just saw this. So this will even affect a discourse instance I host myself and haven’t updated?

1 Like
#4

What exact version you are running?

#5

I’ve since updated. I don’t have the old version number. It was almost a year old. But the errors started occurring before I updated.

#6

Something is fishy if this somehow affected my self hosted non-updated instance.

#7

Without more details, including those version numbers, it’s almost impossible to say.

2 Likes
#8

It should be easy to say if you do something that would make a supposedly entirely standalone self hosted instance stop working due to some unknown integration with external services.

#9

There is nothing that should affect a standalone self-hosted install like this that hasn’t been upgraded. Even if we backported a change to an older version, you wouldn’t receive it unless you manually updated your install. Discourse out of the box doesn’t come with any external services unless you set them up yourself, like email and google analytics.

3 Likes
#11

I didn’t update anything and started getting 403 errors on all api calls. The only thing that fixed the errors was upgrading to the new version and changing request parameters to headers. Something is causing old versions to break due to the api changes even when they are standalone, self hosted and not being explicitly updated.

#12

Change doesn’t occur without change. Something somewhere changed, whether you were aware of that change or not. If not in your container, then on one of the components outside it, or one of the connected systems.

This is all a lot of hand-waving without something tangible to look at though.

3 Likes
#13

Yea I’m not sure. I have an old self hosted instance that still works the old api way. Glad you got it updated and working though.

4 Likes
#14