ISSUE: address books seems unaccessible through API

[paspo]

I' trying to reach addressbook via API calls.

Web interface is using this url: https://my-server.com/api/ab/shared/profiles?current=1&pageSize=20 via POST, but if I try the same URL with token authentication (all permissions enabled in readonly), I get 403/forbidden.

Same for the address book contents: the url is https://my-server.com/api/ab/peers?current=1&pageSize=20&ab=5fed0089-09dd-4716-bc67-0680ab75b08c via GET, but I still get 403/forbidden.

I can retrieve sessions and devices so I think the token is OK.

Maybe the addressbooks aren't accessible via API?

If this is the case, can it be fixed?