Support

Home Forums Event Espresso Premium Event App Error: You are not allowed to list events. Missing permissions: ee_rea

Event App Error: You are not allowed to list events. Missing permissions: ee_rea

Posted: March 10, 2017 at 5:33 pm


anotheropus

March 10, 2017 at 5:33 pm

Hello,

I installed the Event Espresso app on my iPhone.

Then I logged into the app with my WordPress admin login.

When the Event Espresso app loads, it’s empty and gives an alert window for errors.

The first one says:

Error

Sorry, you are not allowed to list events.
Missing permissions: ee_read_events,
ee_read_others_events,
ee_read_private_events

[ok]

When I click OK to close the alert, I get a blank page that says “No records found”
(without a period on the end of it)
No matter what I click in the app there are always no records.

To my knowledge, everything is active on the site that should be.

And we have sold many tickets to many events. And we have many upcoming events in the system through many future months.

Here’s a screenshot of the active EE plugins:

https://www.screencast.com/t/FhijzdjqWq

I need to get this app going for my client who desires to use phones/apps to check in ticket buyers at the next event.

Thank you for your help.

Chris


Josh

  • Support Staff

March 10, 2017 at 6:03 pm

Hi Chris,

You can get the app up and running by following this guide:

https://eventespresso.com/wiki/ee4-event-apps/#troubleshooting


anotheropus

March 13, 2017 at 7:53 pm

Thank you Josh,

I went through the troubleshooting checklist and verified each applicable item:

1. Permalinks have been set to Post name since the beginning of the site.
2. The server is Apache with FCGI–but changing the rewrite rule did nothing.

I worked with my host support for literally one hour and five minutes, as they went through the server and site testing and trying things.

Nothing changed, I still get the same error, and they reported that nothing appears in error logs.

BTW – I’m logged into the app on my iPhone as a site admin. And with each test, I closed the app and re-opened it. The app logs me in without issue (automatically) each time, then the spinner appears, and then the same alert window appears.

Any new ideas?

Chris


Josh

  • Support Staff

March 14, 2017 at 12:30 pm

Do you know what your host checked and tested? I did an unauthenticated GET request to http://yoursite.com/wp-json/ee/v4.8.36/events/ and that’s correctly a JSON response of event data. A GET request to the /registrations/ route requires authentication, and that’s where you’re having problems, the authorization header isn’t getting passed. So can your host identify what’s causing the Authorization header to not get passed?


anotheropus

March 28, 2017 at 5:50 pm

Thank you for the help.
I’ll find out about this.


anotheropus

April 4, 2017 at 12:58 pm

I’m going rounds with my host and not getting results.

I’ve created a new ticket with them, and hope they can make sense of this thread and the page linked in it.

The htaccess fix didn’t work.

I wish this app worked out of the box (as I thought it would have). I told my client I’d have them up and running, checking in their ticket sales at their events. Eff me 🙂

Chris


Josh

  • Support Staff

April 4, 2017 at 1:13 pm

Hi Chris,

The app does work out of the box with most hosts. May I ask which hosting company do you use to host the website on?


anotheropus

April 4, 2017 at 2:24 pm

Thank you Josh,

This is hosted on a managed dedicated, physical server at LiquidWeb.

If you have the smarts to look at what’s causing this I can get you the server, SFTP, cpanel and others logins required.

Chris


Josh

  • Support Staff

April 4, 2017 at 3:21 pm

Hi Chris,

You mentioned earlier that the server is running Apache with FCGI. Can you change it so PHP is installed as an Apache module instead?


anotheropus

April 5, 2017 at 2:56 pm

Josh,

Thank you for letting me know about this option.

I will find out if it can be done.


anotheropus

April 6, 2017 at 9:14 am

Hello Josh,

Here is what my host has looked into and done.

(we’re still not able to use the ticket check-in app–same error)

– – –

Jeff Ruedger (Liquid Web)
Apr 6, 11:03 AM EDT

Hi

I logged into the server and started looking more deeply into this.

I have the following installed in the .htaccess file of http://xxxxxxxxxx.com

# Begin Custom htaccess
SetEnvIf Authorization “(.*)” HTTP_AUTHORIZATION=$1
# End Custom htaccess

I put it at the top, before WP begins.

I then made sure that you have the module for Apache required to run that command.

[root@host public_html]# httpd -L | grep -i mod_setenvif
AH00548: NameVirtualHost has no effect and will be removed in the next release /usr/local/apache/conf/httpd.conf:4333
SetEnvIf (mod_setenvif.c)
SetEnvIfNoCase (mod_setenvif.c)
SetEnvIfExpr (mod_setenvif.c)
BrowserMatch (mod_setenvif.c)
BrowserMatchNoCase (mod_setenvif.c)

Those are installed. So, when I run the link you sent I still get this error.

[the link which requires authentication and which is the issue:
http://tannergunshow.com/wp-json/ee/v4.8.36/registrations/ ]

{“code”:”rest_registrations_cannot_list”,”message”:”Sorry, you are not allowed to list registrations. Missing permissions: ee_read_registrations,ee_read_others_registrations”,”data”:{“status”:403}}
I then wanted to see where it was trying to contact. It appears to be going to api.w.org. That shows up as the following IP’s
;; QUESTION SECTION:
;api.w.org. IN A

;; ANSWER SECTION:
api.w.org. 300 IN CNAME wordpress.org.
wordpress.org. 428 IN A 66.155.40.250
wordpress.org. 428 IN A 66.155.40.249

I verified that they were clear in your firewall.

There is no information in the apache error log regarding this, and the domain error log has not registered a fault since Mar 2.

Just to clarify the server configuration.
We are running apache with the MPM handler of event.
PHP is configured and using FCGI as the handler.
This is the optimal setup for current PHP versions.

I also verified you have the most current WP-json.
It is bundled with event-espresso plugin, which I see you have on the server.

I have looked for modsec errors caused by that call out.
I am not able to find any of those either.

I’m adding a curl -i for him to see if he can identify the problem.

cyberman@cyberman:~$ curl http://xxxxxxxxxx.com/wp-json/ee/v4.8.36/registrations/
{“code”:”rest_registrations_cannot_list”,”message”:”Sorry, you are not allowed to list registrations. Missing permissions: ee_read_registrations,ee_read_others_registrations”,”data”:{“status”:403}}cyberman@cyberman:~$ curl http://tacurl -i http://v.com/wp-json/ee/v4.8.36/registrations/
HTTP/1.1 403 Forbidden
Date: Thu, 06 Apr 2017 14:45:55 GMT
Server: Apache
X-Powered-By: PHP/5.6.30
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-Robots-Tag: noindex
Link: <https://xxxxxxxxxx.com/wp-json/&gt;; rel=”https://api.w.org/”
X-Content-Type-Options: nosniff
Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages
Access-Control-Allow-Headers: Authorization, Content-Type
Allow: GET
Set-Cookie: PHPSESSID=b5e4e9f20fa71f5183f229cfb9117f87; path=/
Set-Cookie: ee_cookie_test=58e654a5181fb; expires=Fri, 07-Apr-2017 14:45:57 GMT; Max-Age=86400; path=/
Transfer-Encoding: chunked
Content-Type: application/json; charset=UTF-8

{“code”:”rest_registrations_cannot_list”,”message”:”Sorry, you are not allowed to list registrations. Missing permissions: ee_read_registrations,ee_read_others_registrations”,”data”:{“status”:403}}

I’ll keep looking for something on the server.

Jeff Ruedger
Linux Systems Support

Liquid Web Inc
https://www.liquidweb.com
Customer Help Center: https://support.liquidweb.com/hc/en-us
800-580-4985 Toll Free
517-322-0434 Intl.
517.322.9412 Secure Fax
517.322.3158 Fax

– – –


Josh

  • Support Staff

April 6, 2017 at 11:21 am

Did they actually send a valid username and password combination in the Authorization header when they sent a request to the /registrations/ route?


anotheropus

April 6, 2017 at 1:16 pm

This wasn’t mentioned.

Can you give me a sample to give to them?

Thank you.

But–my login works on the app, but I still get the data error, after everything so far the app still won’t work.

So, I doubt a username/pass test will do anything.

Thoughts?


Josh

  • Support Staff

April 6, 2017 at 3:13 pm

A request to the /registrations/ route requires authorization. So if they didn’t include a username and password in the request via Basic Auth, then it’s expected that they’d get a response that says “Sorry, you are not allowed to list registrations”.

If you use a tool like Postman, then you can follow this screenshot that shows how to set up the request.

The support post ‘Event App Error: You are not allowed to list events. Missing permissions: ee_rea’ is closed to new replies.

Have a question about this support post? Create a new support post in our support forums and include a link to this existing support post so we can help you.

Event Espresso