Code 500 during API connecting for users without full permissions

Open ghost opened this issue 4 years ago • 0 comments

Hello, where I send POST API to Mautic for users without full permissions Mautic give me code 500 and this log: [2021-03-31 16:06:52] mautic.CRITICAL: Uncaught PHP Exception Mautic\CoreBundle\Security\Exception\PermissionNotFoundException: "Nie znaleziono zgody. 'lead:leads:newown' given." at /var/www/mautic/app/bundles/CoreBundle/Security/Permissions/CorePermissions.php line 292 {"exception":"[object] (Mautic\\CoreBundle\\Security\\Exception\\PermissionNotFoundException(code: 403): Nie znaleziono zgody. 'lead:leads:newown' given. at /var/www/mautic/app/bundles/CoreBundle/Security/Permissions/CorePermissions.php:292)"} []

Even if you select all possible options for user in "Role", the problem occurs. It disappears only when I select "full permissions" or give user administrator access.

Mautic 3.3.2 PHP 7.4.3

Want to back this issue? Post a bounty on it! We accept bounties via Bountysource.

Mar 31 '21 16:03 ghost