"Sorry, you do not have the required trust level to access the user API" when on iOS

(Reed Weichler) #1

Hey, so I’m trying to check out the mobile app for Discourse, and I’ve ran into a few issues already.

First off, it’s impossible to sign up through the mobile app, or at least, for me, it was not intuitive at all. I tried linking my Github account, which “worked” but didn’t take me to any sort of sign up page. So I had to do it on desktop.

And now, after successfully signing up, it says this:

Authorize application access

Sorry, you do not have the required trust level to access the user API

What do I have to do to get rid of that?

(Chris Beach) #2

There’s a setting which you may want to adjust:

If it’s not set to zero, new users won’t be able to use the Discourse mobile app.

To me this seems a usability oversight, and I quickly changed the setting to zero when I realised what was happening to our new users.

However, I’m sure there’s a rationale for the default setting being non-zero.

(Sam Saffron) #3

@codinghorror you ok with me bumping the default to 0

(Jeff Atwood) #4

What are the security implications for all new users to be able to get API keys?

(Sam Saffron) #5

very low risk, protocol for getting a key requires web access. If you can script that you can script a user anyway using cookies

(Jeff Atwood) #6

If you think it is safe then I am OK with it.

(Sam Saffron) #8

Done per:

(Sam Saffron) #9