Ir al contenido
Se marcó esta pregunta
securityaccess
2 Respuestas
2178 Vistas
Avatar
bisyri mustofa

Hi guys, 

I tried to test my API in my custom module in postman, but I got the message that I am not allowed to access the records.

this is the error:
Un-authorized: You are not allowed to access 'Real Estate Property Tag' (estate.property.tag) records.

This operation is allowed for the following groups:- User types/Internal User

Contact your administrator to request access if necessary.

what I've done is:

  1. Checked User Permissions
  2. Assigned the User to the Appropriate Group
  3. Reviewed Model Security Rules

anyone knows how to solve this?


Avatar
Descartar
Midhun M M

While fetching information via the API, did you provide a username and password? Please check that user's permissions.

Avatar
Niyas Raphy (Walnut Software Solutions)
Mejor respuesta

Hi,
First of all you have to do the authentication, you can call the /web/session/authenticate end point for this.

Once the authentication is succeeded you will receive session_id in cookies, which you have to pass in the cookies in the further api requests.

See:   https://www.youtube.com/watch?v=wGvuRbCyytk

Thanks

Avatar
Descartar
bisyri mustofa
Autor

Hi thanks for your advice. I've followed in the video instruction and succeed in postmant but, there is no session_id in the output. instead I found cache_hashes is that simillar to session_id?.
eventually I resolved the problem

Avatar
bisyri mustofa
Autor Mejor respuesta

where should I provide the username and the password? postman? can you guide me

Avatar
Descartar
Publicaciones relacionadas Respuestas Vistas Actividad
How do I hide the Procurements Tab in Product Template for Sales Users? Resuelto
security access
Avatar
1
nov 15
5084
How to configure field permission for 2 groups? Resuelto
security access Development
Avatar
Avatar
Avatar
2
feb 24
1181
How to restrict user from accessing views by changing the action id,menu id in the url
security access Odoo12.0
Avatar
Avatar
1
oct 23
8004
Struggling with ir.model.access.csv Resuelto
security group access
Avatar
Avatar
Avatar
2
sept 21
10834
How to prevent developers from having access to my Data in the database
security development access
Avatar
Avatar
2
dic 19
4760