Problems with API endpoints about chatwoot

[pranavrajs]

@cifuentesmx Thanks for the note, I missed that point. It is correct, you can only manage the accounts that were created using the platform app. Any other account (either created directly or by any other platform app) cannot be managed. This is done to improve the security of the system.

[linear]

PR-1023 Problems with API endpoints

[samuelalvesdev]

When I make a request to this endpoint, I get this information in the log:

Where can I change the permissions for "validate_plataform_app_permissible"?

[vishnu-narayanan]

@samuelalvesdev

1. Are you hitting app.chatwoot.com endpoint?
2. Could you share the request you are making in postman as curl?
3. Are you getting the same error for all endpoints?

[samuelalvesdev]

@vishnu-narayanan

1. Im hitting my host domain as a self-hosted.
2. curl --location --request PATCH 'https://XXXXX.XXXXXX.com.br/platform/api/v1/accounts/2'
   --header 'Content-Type: application/json'
   --header 'api_access_token: XXXXXXXXXXXXXX'
   --data '{
   "status": "suspended"
   }'
3. Yep, im getting the same error for all endpoints. {
   "error": "Non permissible resource"
   }

[vishnu-narayanan]

@samuelalvesdev are you passing a platformAppApiKey as the api_access_token?

[samuelalvesdev]

@vishnu-narayanan
Yep, platformAppApiKey as api_access_token on the header.

[pranavrajs]

Please check if the account number 2 is suspended. It looks like the API is returning proper results.

Closing this here as it is not a bug.

[samuelalvesdev]

@pranavrajs
Are you sure about that?

[cifuentesmx]

@samuelalvesdev is the account created with the platform api? Because i had the same issue deleting the account! I could only delete accounts created with the platform API, normal accounts are somehow protected form platform API changes for some reason. At least I think so.