Skip to Content
This question has been flagged
securityaccess
2 Respostes
3149 Vistes
Avatar
bisyri mustofa

Hi guys, 

I tried to test my API in my custom module in postman, but I got the message that I am not allowed to access the records.

this is the error:
Un-authorized: You are not allowed to access 'Real Estate Property Tag' (estate.property.tag) records.

This operation is allowed for the following groups:- User types/Internal User

Contact your administrator to request access if necessary.

what I've done is:

  1. Checked User Permissions
  2. Assigned the User to the Appropriate Group
  3. Reviewed Model Security Rules

anyone knows how to solve this?


Avatar
Descartar
Midhun M M

While fetching information via the API, did you provide a username and password? Please check that user's permissions.

Avatar
Niyas Raphy (Walnut Software Solutions)
Best Answer

Hi,
First of all you have to do the authentication, you can call the /web/session/authenticate end point for this.

Once the authentication is succeeded you will receive session_id in cookies, which you have to pass in the cookies in the further api requests.

See:   https://www.youtube.com/watch?v=wGvuRbCyytk

Thanks

Avatar
Descartar
bisyri mustofa
Autor

Hi thanks for your advice. I've followed in the video instruction and succeed in postmant but, there is no session_id in the output. instead I found cache_hashes is that simillar to session_id?.
eventually I resolved the problem

Avatar
bisyri mustofa
Autor Best Answer

where should I provide the username and the password? postman? can you guide me

Avatar
Descartar
Related Posts Respostes Vistes Activitat
How do I hide the Procurements Tab in Product Template for Sales Users? Solved
security access
Avatar
1
de nov. 15
5694
How to configure field permission for 2 groups? Solved
security access Development
Avatar
Avatar
Avatar
2
de febr. 24
1181
How to restrict user from accessing views by changing the action id,menu id in the url
security access Odoo12.0
Avatar
Avatar
1
de set. 25
8835
Struggling with ir.model.access.csv Solved
security group access
Avatar
Avatar
Avatar
2
de set. 21
12803
How to prevent developers from having access to my Data in the database
security development access
Avatar
Avatar
2
de des. 19
5478