Hi,
I created a workflow on visual studio 2013 and deploy on sharepoint.com
(workflow type 2013).
I want to give some permissions on users on item in my list, my project is sandbox, so i use rest api.
In my workflow i use the activity AppOnlySequence to use admin privilege and HttpSend.
My list name is "request".
If i call this url:
http://vm-vgdsp13:15844/applications/bmusku/_api/lists/getbytitle('Request')/items(1)
=> it's ok i show json on my item.
If i call the url:
http://vm-vgdsp13:15844/applications/bmusku/_api/lists/getbytitle('Request')/items(1)/breakroleinheritance(true)
=> i had the error UnauthorizedAccessException
Fiddler:
POST http://vm-vgdsp13:15844/applications/bmusku//_api/lists/getbytitle('Request')/items(1)/breakroleinheritance(true) HTTP/1.1
Accept: application/json
Authorization: Bearer eyJ0eXAiOiJKV1QiLCJhbGciOiJub25lIn0.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.
S2SSecurityContext: eyJ0eXAiOiJKV1QiLCJhbGciOiJub25lIn0.eyJkZWZhdWx0VG9rZW4iOiJTMlNXaXRoVXNlcklkVG9rZW4ifQ.
client-request-id: a9d5d0cf-d01d-fe18-b62a-b71966833443
X-MS-WF-RequestorId: a9d5d0cf-d01d-fe18-b62a-b71966833443
Host: vm-vgdsp13:15844
Content-Length: 0
Result:
153<?xml version="1.0" encoding="utf-8"?><m:error xmlns:m="http://schemas.microsoft.com/ado/2007/08/dataservices/metadata"><m:code>-2147024891, System.UnauthorizedAccessException</m:code><m:message xml:lang="fr-FR">Accès refusé. Vous n’êtes pas autorisé à effectuer cette action ou à accéder à cette ressource.</m:message></m:error>
0
So how to use admin to call rest api ?
PS: for sharepoint online i already pass GetS2SSecurityToken but same, i don't have permissions to change my item, i only can see items json (read) but i can't write.
Vincent G