Different Permissions on Different APIs?

Jon Luers

Can anyone explain the granularity of permissions on different APIs? I have a SKY API Application ("ADVIZOR DataLoad") that's used by a Raiser's Edge NXT client who has no problem retrieving Gift lists in the RENXT web view, but when my application, authorized by him, tries a GET Gift list request, the response is 500, “Internal Server Error”, although there is no problem with GET endpoints from the Constituent API, the Fundraising API, or even the Events API. Also, when my client himself tries the Endpoint Reference “Try it” function (the “Console app") for GET Gift list, he gets the same 500 error with the simple message “An error has occurred”.

Is it possible that he is subscribed to everything but the Gifts API, or that he has read permission on the Gifts table, but no permission for the Gifts API? How could such a deficiency be corrected?

Appreciate any suggestions.

Chris Rodgers

Hey Jon,

A 500 response should only ever be returned to your application if we encounter an unexpected error when trying to fulfill the API request. I would have expected a 403 response if the issue was strictly a related to user permissions. I do see that your application encountered a 500 when hitting the gift list recently, but I'll reach out to you to confirm those details so we can track down the issue.

Jon Luers

Thanks, Chris, that's more information than I've gotten so far on Support case 018397705.

Chris Rodgers

Sorry to hear that, Jon. I sent you a private message yesterday. Feel free to message me back when you get a chance.