Jazz Forum Welcome to the Jazz Community Forum Connect and collaborate with IBM Engineering experts and users

RTC 6.0.6 REST API Workitem add comment response 403

For some reason, it is said that there is no access right.
Where can I do it?

POST URL
https://jazz.com/ccm/resource/itemOid/com.ibm.team.workitem.WorkItem/_tzJswGSVEeiUQ4Lb8gF_ow/rtc_cm:comments/oslc:comment
Header
OSLC-Core-Version: 2.0
Accept: application/rdf+xml
Content-Type: application/json



post-data
{
"dcterms:description": "new comment"
}



response 403

Permission Denied

Your account does not have the group memberships required to access the requested resource.
----------------------------------------------
I referred to it

0 votes


Accepted answer

Permanent link

 It is not enough to send the OSLC headers. You also have to make sure you are authenticated and prove you are part of the session. In order to do so, you need to send the header JSESSIONID with the content of the JSESSIONID cookie.


Some applications also require some clients to send the header X-Jazz-CSRF-Prevent with the value of the JSESSIONID cookie. See https://rsjazz.wordpress.com/2019/05/13/using-a-rest-client-to-authenticate-to-elm-clm-applications/

also see:

HIROAKI JOSAKO selected this answer as the correct answer

0 votes

Comments

It is a wonderful point!
JSSESIONID was needed to request a post.
Try it!

Thanks

It went well!
thank you!

Your answer

Register or log in to post your answer.

Dashboards and work items are no longer publicly available, so some links may be invalid. We now provide similar information through other means. Learn more here.

Search context
Follow this question

By Email: 

Once you sign in you will be able to subscribe for any updates here.

By RSS:

Answers
Answers and Comments
Question details
× 10,937

Question asked: Jul 20 '22, 2:55 a.m.

Question was seen: 762 times

Last updated: Jul 21 '22, 3:06 a.m.

Confirmation Cancel Confirm