With a brand new v4 install, I generated a dummy route using strapi generate - I then created an API token. When I attempt to call that dummy route I get a 403 Forbidden error. The API token works though, when I call a core route for an entity, I get a 200 and data So my question - How do I grant …

After stepping through Strapi code I found out what’s going on… The comment from the source code explains it (far better than the Admin UI) /** * If you don't have `full-access` you can only access `find` and `findOne` * scopes. If the route has no scope, then you can't get access to it. */ Giv…

403 for custom route & API token

Questions and Answers

boaz January 28, 2022, 10:35am 2

Hi @daniel.j

I think you have to set the permissions via the ‘users permission’ plugin.