Hi everyone,
I created a custom entity named "Services" and made it available on the Customer Portal. On the external portal page, I added a “Get Signature” button. When portal users click this button, modal opens pop up with a signature pad and Save / Cancel buttons.
When the user clicks Save, I want to store the entered signature into a field on the Services record.
To achieve this, I wrote the following custom configuration service using add source code option. This service was Saved and published correctly in Creatio system.
Issue:
When I test this service using Postman while logged in as the Supervisor using below URL, everything works correctly — the field is updated.
{{BaseURI}}/0/rest/SaveSignatureService/SaveSignature
However, when I call the same service as a portal user, I get this IIS error:
HTTP Error 403.0 – Access to non-SSP API is denied for portal users
Even if I try updating a field on the Case object instead of my custom entity, I get the exact same 403 error. Also, all operation permissions on the Services object are granted to the external user roles.
What I Need Help With
- Why exactly are portal users receiving “Access to non-SSP API is denied”?
Any guidance or best practices on building Creatio services accessible to external/SSP users would be greatly appreciated.
