CommMessages API call with Admin token - "user not authorised to perform that action"

BenjaminSelby

I'm trying to query the '/v1/comm_messages' API end point using an admin-authorised token in Powershell, and I get the message "user not authorised to perform that action". Does anybody know why there would be a problem with this? The token works fine for all other requests. 

I've tried using user ids in the URI like so: '/api/v1/comm_messages?user_id=<###>' as well as with no URI parameters, and I get the same message both times. 

Would greatly appreciate anyone's help for this. 

matthew_buckett

Using curl (command line Unix utility) it works fine for me, I can make a request to:

https://institution.instructure.com/api/v1/comm_messages?user_id=self

I get back a list of all the messages to me, but as my account has admin permissions I can also see the comm messages of other users by using their Canvas ID:

https://institution.instructure.com/api/v1/comm_messages?user_id=1

or their SIS ID as outlined in: https://canvas.instructure.com/doc/api/file.object_ids.html

https://institution.instructure.com/api/v1/comm_messages?user_id=sis_user_id:a-user-id