"Sorry, you do not have the required trust level to access the user API" when on iOS


(Reed Weichler) #1

Hey, so I’m trying to check out the mobile app for Discourse, and I’ve ran into a few issues already.

First off, it’s impossible to sign up through the mobile app, or at least, for me, it was not intuitive at all. I tried linking my Github account, which “worked” but didn’t take me to any sort of sign up page. So I had to do it on desktop.

And now, after successfully signing up, it says this:

Authorize application access

Sorry, you do not have the required trust level to access the user API

What do I have to do to get rid of that?


#2

There’s a setting which you may want to adjust:

If it’s not set to zero, new users won’t be able to use the Discourse mobile app.

To me this seems a usability oversight, and I quickly changed the setting to zero when I realised what was happening to our new users.

However, I’m sure there’s a rationale for the default setting being non-zero.


(Sam Saffron) #3

@codinghorror you ok with me bumping the default to 0


(Jeff Atwood) #4

What are the security implications for all new users to be able to get API keys?


(Sam Saffron) #5

very low risk, protocol for getting a key requires web access. If you can script that you can script a user anyway using cookies


(Jeff Atwood) #6

If you think it is safe then I am OK with it.


(Sam Saffron) #8

Done per:


(Sam Saffron) #9