Se rendre au contenu
Cette question a été signalée
securityaccess
2 Réponses
3008 Vues
Avatar
bisyri mustofa

Hi guys, 

I tried to test my API in my custom module in postman, but I got the message that I am not allowed to access the records.

this is the error:
Un-authorized: You are not allowed to access 'Real Estate Property Tag' (estate.property.tag) records.

This operation is allowed for the following groups:- User types/Internal User

Contact your administrator to request access if necessary.

what I've done is:

  1. Checked User Permissions
  2. Assigned the User to the Appropriate Group
  3. Reviewed Model Security Rules

anyone knows how to solve this?


Avatar
Ignorer
Midhun M M

While fetching information via the API, did you provide a username and password? Please check that user's permissions.

Avatar
Niyas Raphy (Walnut Software Solutions)
Meilleure réponse

Hi,
First of all you have to do the authentication, you can call the /web/session/authenticate end point for this.

Once the authentication is succeeded you will receive session_id in cookies, which you have to pass in the cookies in the further api requests.

See:   https://www.youtube.com/watch?v=wGvuRbCyytk

Thanks

Avatar
Ignorer
bisyri mustofa
Auteur

Hi thanks for your advice. I've followed in the video instruction and succeed in postmant but, there is no session_id in the output. instead I found cache_hashes is that simillar to session_id?.
eventually I resolved the problem

Avatar
bisyri mustofa
Auteur Meilleure réponse

where should I provide the username and the password? postman? can you guide me

Avatar
Ignorer
Publications associées Réponses Vues Activité
How do I hide the Procurements Tab in Product Template for Sales Users? Résolu
security access
Avatar
1
nov. 15
5584
How to configure field permission for 2 groups? Résolu
security access Development
Avatar
Avatar
Avatar
2
févr. 24
1181
How to restrict user from accessing views by changing the action id,menu id in the url
security access Odoo12.0
Avatar
Avatar
1
sept. 25
8721
Struggling with ir.model.access.csv Résolu
security group access
Avatar
Avatar
Avatar
2
sept. 21
12505
How to prevent developers from having access to my Data in the database
security development access
Avatar
Avatar
2
déc. 19
5380