Some test results:
- created API key with user level “single user”
- I first looked at scope settings “granular”, but could not find a restriction for “events” endpoints. Although “events” is listed as a query group at Discourse API Docs
- I used “read only” instead. Result “You are not authorised to view the requested resource.”
curl -kv https://xxx/discourse-post-event/events.ics?user_api_key=xxx returns no ics when you use a “single user” API key. And a full list of events with user level “all users”. I see no way how to “filter” for events of a special user group.
I also checked https:[xxxx]/admin/plugins/discourse-events/settings for any potentially wrong API-related settings, no results
Any comments?