Search
My Products
Help
andretvard
CONTRIBUTOR ***

"You don't have permission to access this resource" when accessing API

‎30-08-2022 15:01
by andretvard

Hi 

 

We noticed that many of our customers started to get "You don't have permission to access this resource" error when accessing API. It seems that GET requests work but not POST/PUT.

 

Please advise on how to handle this problem.

 

Here is the response we get from API:

 

<html><head>
<title>403 Forbidden</title>
</head><body>
<h1>Forbidden</h1>
<p>You don't have permission to access this resource.</p>
</body></html>
0 Kudos
23 REPLIES 23
Florian Haase
PARTNER
PARTNER

‎31-08-2022 14:33
by Florian Haase

Same problem here: 

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>403 Forbidden</title> </head><body> <h1>Forbidden</h1> <p>You don't have permission to access this resource.</p> </body></html> Faktura 203797 - <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>403 Forbidden</title> </head><body> <h1>Forbidden</h1> <p>You don't have permission to access this resource.</p> </body></html>

 

We try to add attachment to incoming invoices. That critical for us because we use that for reverse invoicing. 

 

0 Kudos
Magnus Johnsen
VISMA
VISMA

In response to Florian Haase
‎31-08-2022 15:45
by Magnus Johnsen

Could you please send us the companyID?

0 Kudos
Florian Haase
PARTNER
PARTNER

In response to Magnus Johnsen
‎31-08-2022 15:57
by Florian Haase

080902

0 Kudos
Magnus Johnsen
VISMA
VISMA

In response to Florian Haase
‎31-08-2022 16:00
by Magnus Johnsen

This does not look like a companyID, could you please doublecheck?

0 Kudos
Florian Haase
PARTNER
PARTNER

In response to Florian Haase
‎31-08-2022 15:58
by Florian Haase

Sorry that paste went wrong. Its 

3116476
0 Kudos
erik-kle
PARTNER
PARTNER

‎31-08-2022 10:50
by erik-kle

A customer reports that lineDescription and uom is not posted on SalesOrderV2. So this old bug from this summer is probably back. 

IPP-REQUEST-ID: 0fa328f1-6b77-4c9a-a0f4-f51c3a73b4af

0 Kudos
andretvard
CONTRIBUTOR ***

‎31-08-2022 08:48
by andretvard

Hi

 

POST controller/api/v1/customerinvoice/{invoiceNumber}/attachment still does not work.


RESPONSE:
{StatusCode: 403, ReasonPhrase: 'Forbidden', Version: 1.1, Content: System.Net.Http.HttpConnectionResponseContent, Headers:
{
Date: Wed, 31 Aug 2022 06:43:12 GMT
Server: Nginx
Strict-Transport-Security: max-age=31536000; includeSubDomains
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
}}

 

3a8cddc5-7619-461f-839e-facfd801dcf3

0 Kudos
Magnus Johnsen
VISMA
VISMA

In response to andretvard
‎31-08-2022 10:38
by Magnus Johnsen

Hi,

We're not able to reproduce this, is it still an issue? 2022-08-31 10_37_37-Postman.png

0 Kudos
Michel V
CONTRIBUTOR ***

In response to Magnus Johnsen
‎31-08-2022 11:45
by Michel V

Hi Magnus,

Still getting reports about adding attachments to certain documents:

HTTP-POST => integration.visma.net/API/controller/api/v1/supplierInvoice/documentType/Invoice/{invoiceId}/attachment
HTTP-Receive-Header => HTTP/1.1 403 Forbidden
Connection: Keep-Alive
Date: Wed, 31 Aug 2022 09:18:29 GMT
Keep-Alive: timeout=15, max=91
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
Server: Nginx

0 Kudos
Magnus Johnsen
VISMA
VISMA

In response to Michel V
‎31-08-2022 13:18
by Magnus Johnsen

Hi,

Could you please send us the error message returned as well?

We are not able to reproduce this, but it might be related to companyInContext issues. 

0 Kudos
Michel V
CONTRIBUTOR ***

In response to Magnus Johnsen
‎31-08-2022 13:21
by Michel V (Updated ‎31-08-2022 13:25 by Michel V )

We are able to create supplierinvoice but when adding an attachment the following error occurs:

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>403 Forbidden</title>
</head><body>
<h1>Forbidden</h1>
<p>You don't have permission to access this resource.</p>
</body></html>

0 Kudos
Magnus Johnsen
VISMA
VISMA

In response to Michel V
‎31-08-2022 15:44
by Magnus Johnsen

Could you please send us the companyID?

 

0 Kudos
Michel V
CONTRIBUTOR ***

In response to Magnus Johnsen
‎31-08-2022 15:59
by Michel V

Hi Magnus,

I've sent an email to developersupport@visma.com with the requested companyID

0 Kudos
erik-kle
PARTNER
PARTNER

‎30-08-2022 17:13
by erik-kle

PUT /controller/api/v1/shipment/{shipmentNbr}
500 - VismaId: 02995599-65ad-411e-93df-ca149b752a13. Object reference not set to an instance of an object

{
"shipmentNumber": {
"Value": "000126"
},
"shipmentPackageLines": [
{
"boxId": {
"Value": "PC"
},
"weight": {
"Value": 90.000000
},
"customRefNbr2": {
"Value": "Test"
},
"operation": "Insert"
}
]
}

0 Kudos
Magnus Johnsen
VISMA
VISMA

‎30-08-2022 16:33
by Magnus Johnsen

The issues seems to be resolved now, calls are going through.

Please let us know if you are still having issues. 

Thank you. 

0 Kudos
Michel V
CONTRIBUTOR ***

In response to Magnus Johnsen
‎30-08-2022 16:51
by Michel V (Updated ‎30-08-2022 16:56 by Michel V )

We are still experiencing the issues with adding attachments to invoice 

POST /controller/api/v1/customerinvoice/{invoiceNumber}/attachment

Adding attachments to supplierinvoices also returns 403 Forbidden

POST /controller/api/v1/supplierInvoice/{invoiceNumber}/attachment

Updating customer seems to work now

0 Kudos
Stefan Hult
PARTNER
PARTNER

In response to Magnus Johnsen
‎30-08-2022 16:39
by Stefan Hult

It Works for us. Thanks.

0 Kudos
andretvard
CONTRIBUTOR ***

‎30-08-2022 15:33
by andretvard

PUT SalesOrder 

POST SalesOrder/Action/CreateShipment 

0 Kudos
Magnus Johnsen
VISMA
VISMA

‎30-08-2022 15:20
by Magnus Johnsen

Hi,

We are able to reproduce this on some endpoints, do you have any examples that we can pass on to the developer team?

We are currently looking in to this.
It would help knowing:

  • Endpoint
  • Timestamp
  • Request-ID

Thank you. 

0 Kudos
Michel V
CONTRIBUTOR ***

In response to Magnus Johnsen
‎30-08-2022 15:29
by Michel V (Updated ‎30-08-2022 15:30 by Michel V )

Hi Magnus,

We are currently noticing the same problem. (time is GMT+2)


Endpoints:
Updating customer PUT /controller/api/v1/customer/{customerCd}

8/30/2022, 1:59:42.880 PM 

8/30/2022, 1:59:42.803 PM 

8/30/2022, 1:59:42.394 PM

8/30/2022, 1:59:41.713 PM

 

Adding attachment to invoice POST /controller/api/v1/customerinvoice/{invoiceNumber}/attachment

8/30/2022, 2:59:51.406 PM

8/30/2022, 2:59:51.282 PM

 

Unfortunately i do not have a Request-ID

I will be happy to provide you with more details should you require them.

0 Kudos
Choose your region:
Choose your Region
Go