User not authorized to perform that action

I am getting an unauthorized error when attempting to view user page views while using a token generated from my admin account.

The error is: "user not authorized to perform that action"

The following API call produces the error:

curl https://.instructure.com/api/v1/users/:userid/page_views \

-X GET \

-H 'Authorization: Bearer :admin_token'

However, a call to "self" works:

curl https://.instructure.com/api/v1/users/self/page_views \

-X GET \

-H 'Authorization: Bearer :admin_token'

What are the permissions needed to view other users' page views?

Find more posts tagged with

Open API

Apps & LTIs

Accepted answers

andersov

I solved it. Was using our SIS ID for the user, instead of Canvas' 7-digit ID value. Rookie mistake.

All comments

Robert

Good question.

What is your current role?

I have admin and root_admin and can hit that endpoint without masquerading. I'm having a hard time seeing what permissions Account Admin role has that give me permission on the API.

andersov

I solved it. Was using our SIS ID for the user, instead of Canvas' 7-digit ID value. Rookie mistake.

James

andersov,

My guess (after ruling out what carroll-ccsd suggested) is to double check the user ID and make sure it's the correct type and a valid number.

You need to be entering the Canvas user ID and not your SIS user ID (unless you preface it with sis_user_id: as explained on the SIS IDs page.

Also make sure that the users is yours and you didn't transpose some digits. For example, user 8296700 is ours, but if I put 8269700, I get a 401 Unauthorized error because that user belongs to a different account.

unknown

I am getting this message when trying to look at missing submissions for students, my code is as follows:

user_nm_and_ids_dict= get_user_names_and_ids() ##returns a dictionary containing every student's name and id.

for name in user_nm_and_ids_dict:

print(name)

user_id= int(user_nm_and_ids_dict[name])

user= course.get_user(user_id)

missing_submissions= user.get_missing_submissions()

print(missing_submissions) ##does end up printing out

for missing_submission in missing_submissions: ##this is where I get my error

print(missing_submission)

The official error I am receiving in terminal is as follows:

Traceback (most recent call last):
File "c:\Users\dylan\coding\Canvas API Playground\creating_pages_schoolcourseexample.py", line 110, in
for missing_submission in missing_submissions:
File "C:\Users\dylan\AppData\Local\Programs\Python\Python39\lib\site-packages\canvasapi\paginated_list.py", line 48, in __iter__
new_elements = self._grow()
File "C:\Users\dylan\AppData\Local\Programs\Python\Python39\lib\site-packages\canvasapi\paginated_list.py", line 92, in _grow
new_elements = self._get_next_page()
File "C:\Users\dylan\AppData\Local\Programs\Python\Python39\lib\site-packages\canvasapi\paginated_list.py", line 56, in _get_next_page
response = self._requester.request(
File "C:\Users\dylan\AppData\Local\Programs\Python\Python39\lib\site-packages\canvasapi\requester.py", line 243, in request
raise Unauthorized(response.json())
canvasapi.exceptions.Unauthorized: [{'message': 'user not authorized to perform that action'}]

themidiman

@dylanrainbolt , this should probably have been in its own question/post since this post was marked as solved. Be as it may, your question needs to be clarified: what user does your API token go with? Is it an admin user or a user with a different role (i.e. Teacher or is it your own account as a student in a course)? Also what API endpoint are you using?

Unanswered Questions

Finding the LTIv1.3 IDs for Members of a Course
I'm building a tool for my institution that imports grades from another LTI tool into Canvas so instructors can automate late assignment policies not otherwise supported by Canvas. I'm trying to use the LTIv1.3 ID which is readily available on the LTI-side as a link to the student record on Canvas, but I can't find the ID…
Canvas Media Question
How can one track Canvas Media use without having the reports available from Canvas Studio? Checking API endpoints and the Data 2 schema, there do not seem to be dedicated Canvas Media endpoints. Am I missing some? A method I've considered is using the body field of the wiki_pages table, as this contains the html code of…
Canvas Catalog API - Completed Certificates
Hello, I'm trying to utilize an API call to pull completed certificates and was hoping to download and store the certs as a backup. I can successfully run the API call but it will not allow me to view the certificate unless I access the URL while signed into an account where it's "my" cert. Is there a permissions setting…
UI for weekly progression idea
UI for weekly progression idea that rest in the Schedule tab of the **K-12 UI** of Canvas it's incomplete and I really would not take it and push it into instance but I am going to post it here because in the past people like @James && @robotcars || @Steve_25 have had terrific input in the past... maybe w/their eyes and…
Canvas integration with React + Flask webapp - initially for authenticaiton
I have a new React + Flask webapp. It has its own login for users to start using the app. I have added this as an external tool in Canvas. What I want initially is to see of canvas users can start using the webapp without having to login if they click on the external tool link in a canvas course. I have 2 methods…