Skip to Content
Dette spørgsmål er blevet anmeldt
securityaccess
2 Besvarelser
3055 Visninger
Avatar
bisyri mustofa

Hi guys, 

I tried to test my API in my custom module in postman, but I got the message that I am not allowed to access the records.

this is the error:
Un-authorized: You are not allowed to access 'Real Estate Property Tag' (estate.property.tag) records.

This operation is allowed for the following groups:- User types/Internal User

Contact your administrator to request access if necessary.

what I've done is:

  1. Checked User Permissions
  2. Assigned the User to the Appropriate Group
  3. Reviewed Model Security Rules

anyone knows how to solve this?


Avatar
Kassér
Midhun M M

While fetching information via the API, did you provide a username and password? Please check that user's permissions.

Avatar
Niyas Raphy (Walnut Software Solutions)
Bedste svar

Hi,
First of all you have to do the authentication, you can call the /web/session/authenticate end point for this.

Once the authentication is succeeded you will receive session_id in cookies, which you have to pass in the cookies in the further api requests.

See:   https://www.youtube.com/watch?v=wGvuRbCyytk

Thanks

Avatar
Kassér
bisyri mustofa
Forfatter

Hi thanks for your advice. I've followed in the video instruction and succeed in postmant but, there is no session_id in the output. instead I found cache_hashes is that simillar to session_id?.
eventually I resolved the problem

Avatar
bisyri mustofa
Forfatter Bedste svar

where should I provide the username and the password? postman? can you guide me

Avatar
Kassér
Related Posts Besvarelser Visninger Aktivitet
How do I hide the Procurements Tab in Product Template for Sales Users? Løst
security access
Avatar
1
nov. 15
5608
How to configure field permission for 2 groups? Løst
security access Development
Avatar
Avatar
Avatar
2
feb. 24
1181
How to restrict user from accessing views by changing the action id,menu id in the url
security access Odoo12.0
Avatar
Avatar
1
sep. 25
8756
Struggling with ir.model.access.csv Løst
security group access
Avatar
Avatar
Avatar
2
sep. 21
12628
How to prevent developers from having access to my Data in the database
security development access
Avatar
Avatar
2
dec. 19
5441