Exception Caught: You are not authorized to create Invoices/Quotes

RE: Exception Caught: You are not authorized to create Invoices/Quotes

Jeff Bickart — Mon, 16 May 2022 18:36:32 GMT

In a future post at sugardevelopersguide.substack.com, I will provide step-by-step instructions on using PHPStrorm to debug your Sugar instance.

I'll provide examples via Postman, the browser, and CLI.

If you don't subscribe; please do so so you are notified when there are new posts

RE: Exception Caught: You are not authorized to create Invoices/Quotes

Manson ho — Wed, 11 May 2022 22:37:33 GMT

Hi Jeff,
Thank you for your reply.

After spending two days for debugging, I am confusing about the user role thing.
The exception is throwing by this file /SugarPro/clients/base/api/ModuleApi.php and the method is createBean

        if (!$bean->ACLAccess('save', $this->aclCheckOptions)) {
            // No create access so we construct an error message and throw the exception
            $moduleName = null;
            if(isset($args['module'])){
                $failed_module_strings = return_module_language($GLOBALS['current_language'], $args['module']);
                $moduleName = $failed_module_strings['LBL_MODULE_NAME'];
            }
            $args = null;
            if(!empty($moduleName)){
                $args = array('moduleName' => $moduleName);
            }
            throw new SugarApiExceptionNotAuthorized('EXCEPTION_CREATE_MODULE_NOT_AUTHORIZED', $args);
        }

In order to use postman for testing, I disable the required login. Then, I try to call our custom api which will turn out creating a new non paid invoice.

The questions is, if no login require, then how come sugar will check the ACLAccess?

Which account sugar is using to check the role and permission?

RE: Exception Caught: You are not authorized to create Invoices/Quotes

Jeff Bickart — Wed, 11 May 2022 01:16:01 GMT

Please review the User account. What license are they assigned? Are they a member of any role? You can see this on the Users profile on the Access Tab. Does the user have the ability to Save the Invoices/Quotes?