PATCH request returning "API-1007 : You are not authorized to process request"

Products

• Clarity PPM On Premise
• Clarity PPM SaaS

Issue/Introduction

• A PATCH REST API request is made against a specific Project
• It returns status code of 401
• The error message is as follows:
  API-1007 : You are not authorized to process request

Resolution

1. Determine the attributes being updated via the PATCH request
2. Determine if one or more of these attributes is Secured in the 'Attributes' page of the Modern UX > 'Administration' module
3. If an attribute is secured, then check the groups that have access to edit
4. Note that if the PATCH request is made via a Gel Script, then the account that is used to make this request, from within the script, which is distinct from the person who triggered the Process that contains the script, should be part of at least one group, that has access to edit.