0

I am trying to debug a method from postman but I am getting this error

CommerceController.OnActionExecuting.Forbidden: User not allowed for action /extops/Synchronize

error

I am connected with the Sitecore/Admin user in the postman. I have also added the roles to the Sitecore/Admin account

sitecore\Commerce Administrator
sitecore\Commerce Business User

But I am keep getting the 403 forbidden error.

Is there a way I can bypass the authentication?

Any help or suggestion would be appreciated.

Thanks in advance

Improve this question

1 Answer 1

Reset to default
1

Look for Sitecore.Commerce.Core.ControllerMethodRolesPolicy. It maps a Regular Expression to Authorized Roles. In your case you need to add an entry for /extops/ and match it with whatever roles you want to Authorize.

If you are on 9.x then you'll find this policy under wwwroot\data\Environments\Core.ControllerMethodRoles.PolicySet-1.0.0.json

If you are on 10.x then you'll find it in Global.json

Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.