Error: 'API-1007' - Unable to edit tasks when access is missing

Products

Clarity PPM SaaS Clarity PPM On Premise

Issue/Introduction

You are unable to edit tasks (even if you are assigned to them) for that project in the New User Experience (UX). In most cases, the updates are being applied to the task but you continue to see the error.
One of the following errors is generated when you try to edit a task on the Tasks tab:
"API-1007: You are not authorized to process request. Contact your system administrator for necessary security rights"

or

"Error: Project.tasks.errors.couldNotPatchCard"

Steps to Reproduce:

Create a new project in the New User Experience with at least one task
Create a new user in Clarity with the following access:
- Project Management - Navigate (Global level)
- Projects - Navigate (Global level)
- Project - View - Instance level to the project created in Step 1
In the New UX, click the 'Resource Staffing' icon on the left-hand menu
In the 'Investments to Resources' portlet, expand the project created in step 1 and click the + icon next to the project name
In the 'Search roles' field enter a role name (In this example, Project Manager) then click the role to add it to the project
In the 'Investments to Resources' portlet, click on the role that was just added to the project which will bring up the role details window on the right-hand side
In the 'Allocate To' field, replace the role with the resource created in Step 2
Click 'Confirm Allocation' to complete the role replace
Log in as the user created in Step 2 and navigate to the 'Tasks' section of the project created above
From the List view, attempt to change the status of a task. Or, from the Board view, attempt to move a task in one of the columns to a different column (example: move a task from 'Incoming' to 'Waiting to Pull')

Results: Receive one of the following error messages and you are unable to edit the task. "API-1007: You are not authorized to process request. Contact your system administrator for necessary security rights" or "Error: Project.tasks.errors.couldNotPatchCard"
Additionally, the access right "Project - Task Management" does not show up in the instance level access rights, which is what is preventing you from being able to edit tasks:

In the Classic UI, go to Administration->Resources and click on the resource name
From the 'Resource's Access Rights' tab drop-down, select 'Instance'
The access right 'Project - Task Management' is missing (Or if the user was already added correctly for other projects, if you click on the link to the 'Project - Task Management' the project in the steps above is missing in the user's access).

Environment

Release: All Supported
Component: Clarity Project Management

Cause

This is due to you not automatically being granted the access right 'Project - Task Management access' at the Instance level for that project. You are therefore unable to edit tasks on either the Task Board or List view. For versions prior to 15.9, this can happen in particular you are added to a project team via Clarity Classic UI or added using the role replace functionality (in the New UX or Classic UI). In 15.9 and higher, you will see this in additional scenarios as well.

Resolution

Ensure you have the following access right: Project - Task Management which can be granted at the instance, OBS or the Global level. Note: This access will give you access to edit all tasks on the project, not just assigned tasks. In the Modern UX, there is no access to be able to edit just assigned tasks.

In the Classic UI, go to Administration->Resources and click on the resource name
From the 'Resource's Access Rights' tab drop-down, select 'Instance'
Click 'Add'
For Object, select Project and click 'Next'
Check the check box next to 'Project - Task Management' and click 'Add and Continue'
Check the check box next to the project the user should have the access for
Click 'Add'

Notes:

Starting in 15.5.1: The access right is available at the global level, OBS, and instance level.
For releases prior to 15.5.1: You can grant this level at the OBS level or instance level for resources to allow them to have this access to all projects in the same OBS.

Starting in 15.9

The Project - Task Management access right is no longer automatically granted. It must be manually assigned using the steps above.

Prior to 15.9

Team members are automatically granted the access right 'Project - Task Management' at the instance level if they are added to a project directly from the 'Conversations' section of the project in the New UX or if the team member is assigned to tasks on the Project Tasks list or board views in the New UX. Below are a couple of additional options to assign the access.

Option 1: Assign the resource to any task on the project via the New UX.

The user will then have access to all the tasks on that specific project.

Option 2: Remove the user from the project's Conversation section and then readd them to the Conversation.

The user will then have the access right 'Project - Task Management' for that project.