# "Sorry, you do not have the required trust level to access the user API" when on iOS

**URL:** https://meta.discourse.org/t/sorry-you-do-not-have-the-required-trust-level-to-access-the-user-api-when-on-ios/71084
**Category:** Support
**Created:** [9월 30, 2017, 3:42오전 UTC](https://meta.discourse.org/t/sorry-you-do-not-have-the-required-trust-level-to-access-the-user-api-when-on-ios/71084 "2017-09-30T03:42:13Z")
**Posts on this page:** 8
**Page:** 1

<div class="post-metadata">

### Author: ![r333d](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/r333d/32/120673_2.png) [@r333d](https://meta.discourse.org/u/r333d)
#### Post date: [9월 30, 2017, 3:42오전 UTC](https://meta.discourse.org/t/sorry-you-do-not-have-the-required-trust-level-to-access-the-user-api-when-on-ios/71084/1 "2017-09-30T03:42:13Z")

</div>

Hey, so I’m trying to check out the mobile app for Discourse, and I’ve ran into a few issues already.

First off, it’s impossible to sign up through the mobile app, or at least, for me, it was not intuitive at all. I tried linking my Github account, which “worked” but didn’t take me to any sort of sign up page. So I had to do it on desktop.

And now, after successfully signing up, it says this:

> # Authorize application access
> 
> **Sorry, you do not have the required trust level to access the user API**

What do I have to do to get rid of that?

---

<div class="post-metadata">

### Author: ![ChrisBeach](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/chrisbeach/32/214628_2.png) [@ChrisBeach](https://meta.discourse.org/u/ChrisBeach)
#### Post date: [9월 30, 2017, 7:45오전 UTC](https://meta.discourse.org/t/sorry-you-do-not-have-the-required-trust-level-to-access-the-user-api-when-on-ios/71084/2 "2017-09-30T07:45:23Z")

</div>

There’s a setting which you may want to adjust:

 ![2C04661A-6E3E-4D83-8104-FA41D3B8F460](https://global.discourse-cdn.com/meta/original/3X/9/d/9d68201c79ccd0fa410214d04b64ca6794b6cf6d.jpeg)

If it’s not set to zero, new users won’t be able to use the Discourse mobile app.

To me this seems a usability oversight, and I quickly changed the setting to zero when I realised what was happening to our new users.

However, I’m sure there’s a rationale for the default setting being non-zero.

---

<div class="post-metadata">

### Author: ![sam](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/sam/32/102149_2.png) [@sam](https://meta.discourse.org/u/sam)
#### Post date: [9월 30, 2017, 8:32오전 UTC](https://meta.discourse.org/t/sorry-you-do-not-have-the-required-trust-level-to-access-the-user-api-when-on-ios/71084/3 "2017-09-30T08:32:45Z")

</div>

@codinghorror you ok with me bumping the default to 0

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [9월 30, 2017, 8:57오전 UTC](https://meta.discourse.org/t/sorry-you-do-not-have-the-required-trust-level-to-access-the-user-api-when-on-ios/71084/4 "2017-09-30T08:57:27Z")

</div>

What are the security implications for all new users to be able to get API keys?

---

<div class="post-metadata">

### Author: ![sam](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/sam/32/102149_2.png) [@sam](https://meta.discourse.org/u/sam)
#### Post date: [9월 30, 2017, 8:59오전 UTC](https://meta.discourse.org/t/sorry-you-do-not-have-the-required-trust-level-to-access-the-user-api-when-on-ios/71084/5 "2017-09-30T08:59:23Z")

</div>

very low risk, protocol for getting a key requires web access. If you can script that you can script a user anyway using cookies

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [9월 30, 2017, 9:03오전 UTC](https://meta.discourse.org/t/sorry-you-do-not-have-the-required-trust-level-to-access-the-user-api-when-on-ios/71084/6 "2017-09-30T09:03:10Z")

</div>

If you think it is safe then I am OK with it.

---

<div class="post-metadata">

### Author: ![sam](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/sam/32/102149_2.png) [@sam](https://meta.discourse.org/u/sam)
#### Post date: [10월 2, 2017, 12:03오전 UTC](https://meta.discourse.org/t/sorry-you-do-not-have-the-required-trust-level-to-access-the-user-api-when-on-ios/71084/8 "2017-10-02T00:03:24Z")

</div>

Done per:

[https://github.com/discourse/discourse/commit/8f7062bd7b2726042bbadf2623ccdca04eab535b](https://github.com/discourse/discourse/commit/8f7062bd7b2726042bbadf2623ccdca04eab535b)

---

<div class="post-metadata">

### Author: ![sam](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/sam/32/102149_2.png) [@sam](https://meta.discourse.org/u/sam)
#### Post date: [10월 2, 2017, 12:03오전 UTC](https://meta.discourse.org/t/sorry-you-do-not-have-the-required-trust-level-to-access-the-user-api-when-on-ios/71084/9 "2017-10-02T00:03:37Z")

</div>


