elsa-workflows / elsa-workflows/elsa-core
descriptor/commit-strategies endpoints always results in 403
- Dominant language
- C#
- Stars
- 7.9k
- Forks
- 1.5k
- Avg merge
- 15h 22m
- Merged PRs (30d)
- 114
Description
## Description
Even with using the Admin User Provider to get * permissions, I am always getting a 403 forbidden result from the /elsa/api/descriptors/commit-strategies/workflows endpoint and the /elsa/api/descriptors/commit-strategies/activities endpoint. I was sure to hit another descriptor endpoint (/elsa/api/descriptors/activities) to make sure the error was isolated to those endpoints.
## Steps to Reproduce
1. **Detailed Steps**: Acquired a valid bearer token and verified I could hit an authenticated endpoint (/elsa/api/descriptors/activities). Attempted to hit /elsa/api/descriptors/commit-strategies/workflows and /elsa/api/descriptors/commit-strategies/activities with no success.
4. **Reproduction Rate**: 100% of the time
## Expected Behavior
I expect the endpoints to return a 200 status code with data.
## Actual Behavior
The endpoints return a 403 Forbidden status.
## Screenshots


(Working endpoint call)

## Environment
- **Elsa Package Version**: 3.4.
- **Operating System**: Windows 10
## Troubleshooting Attempts
1. Gave all roles in my store the "read:commit-strategies" permission to no success.
2. Used the admin user provider instead of the store based role and user providers to rule out insufficient permissions with my current identity.
3. Removed all permissions from all roles in my store and attempted to hit a previously working endpoint to observe it returning a 403, which it did as expected.
## Additional Context
First noticed the issue when trying to use the flowchart editor in elsa studio. Isolated the issue to Elsa-server.
Contributor guide
Assessment
This issue has not been assessed yet.