Rest API not returning contacts that user can view in GUI

[naomi]

Hi,

I have given the "Ajax API" permission to authenticated users.

I have two users, A and B, which have API keys.

User A has full administrative rights. Using A's API key I can get all contacts, as expected. So the API is working.

User B is merely an authenticated user and as such does NOT have the "View all contacts" permission in Drupal. But she is a member of a CiviCRM Group with an ACL configured (inside CiviCRM) allowing her to view contacts from another group. When I log on as user B in the GUI, I can view these contacts. But when I try to use the REST API with user B's API key, I get NO contacts.

Please can anyone advise on how to make these contacts available via the API like they are via the GUI?

Edit: In fact, B cannot even get her own contact from the API, despite authenticated users having the "CiviCRM: view my contact" permission.

Thank you,

Naomi

[Coleman Watts]

Hmm, is it limited to the rest api? Can you try the ajax api? This is easy to test, just paste this code into your browser console:

Code: [Select]

CRM.api3('contact', 'get', {});

[naomi]

Thanks! That works. But the goal is to script it. Is there a way to script logging in and calling the Ajax API?

Edit: I used `CRM.api3` as `CRM.api` did not work.

[xavier]

what is the rest url you are trying (obviously without showing your keys??

[naomi]

Hi Xavier,

/sites/all/modules/civicrm/extern/rest.php?entity=Contact&action=get&json={}&api_key=myapikey&key=mysitekey

When using the api key of a user with "View all contact" permissions, the URL returns the expected results, so I suspect  the URL is correct

Thanks

[xavier]

Hi,

you don't need the json= param, it's another way to pass params (when they are linked). can you try without and add debug=1 (probably not going to be useful but might give extra info)?

what's your civicrm version?
What's the result? count=0 and not values?

[naomi]

Hi Xavier, thanks for your reply.

I'm using the json parameter because I want the results in json rather than xml.

Civi version is 4.5.2

Here are the results in JSON and in XML:

Code: [Select]

{"is_error":0,"version":3,"count":0,"values":[]}

Code: [Select]

<ResultSet xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" count="0"></ResultSet>