BUG: Rest API creates board in view only

  • 24 October 2023
  • 4 replies
  • 81 views

Badge +1

Below is a bug report for some unexpected behaviour I have found when working with the api as a free plan user.

 

Steps to reproduce

  1. Create a board using an access token of a free account through the REST API, noting the resulting board ID (post v2/boards)
  2. Create a frame in the board (post v2/boards/ID/frames)

Actual Result

403 - User is not authorized to create widgets on this board.

Upon further investigation in the miro dashboard, I notice that the board is created in view-only, therefore not allowing me (and my access token) to edit it.

Expected Result

Since the created board is the most recent board, it should be editable even for free accounts exceeding 3 boards (by making an older one view-only). This would then allow me to also edit it through the api, without the error.


4 replies

Badge

Are there any updates to when the fix of this will occur? It is still happening to me.

Userlevel 2
Badge

Thank you for providing more details, it helped a lot! We could reproduce the issue and notified the team. The expected behavior is indeed what you wrote in the first comment, so hopefully it’ll be fixed soon in the near future. 

Thanks,

Elena.

Badge +1

Hi @Elena Ignatik I have attached the before, after view of the dashboard and my request and response from my rest client:

Request:

curl --request POST \
  --url https://api.miro.com/v2/boards \
  --header 'Authorization: Bearer REDACTED' \
  --header 'Content-Type: application/json' \
  --header 'User-Agent: insomnia/2023.5.8' \
  --cookie 'REDACTED' \
  --data '{
   "name":"test with rest api",
   "description":"test"
}'

 

Response:

{
    "id": "uXjVNWqZHfk=",
    "type": "board",
    "name": "test with rest api",
    "description": "test",
    "links": {
        "self": "https://api.miro.com/v2/boards/uXjVNWqZHfk%3D",
        "related": "https://api.miro.com/v2/boards/uXjVNWqZHfk%3D/members?limit=20&offset=0"
    },
    "createdAt": "2023-10-24T16:32:13Z",
    "createdBy": {
        "id": "3458764535741435718",
        "type": "user",
        "name": "Tim Moser"
    },
    "currentUserMembership": {
        "id": "3458764535741435718",
        "type": "board_member",
        "name": "Tim Moser",
        "role": "owner"
    },
    "modifiedAt": "2023-10-24T16:32:13Z",
    "modifiedBy": {
        "id": "3458764535741435718",
        "type": "user",
        "name": "Tim Moser"
    },
    "owner": {
        "id": "3458764535741435718",
        "type": "user",
        "name": "Tim Moser"
    },
    "permissionsPolicy": {
        "collaborationToolsStartAccess": "all_editors",
        "copyAccess": "anyone",
        "copyAccessLevel": "anyone",
        "sharingAccess": "team_members_with_editing_rights"
    },
    "policy": {
        "permissionsPolicy": {
            "collaborationToolsStartAccess": "all_editors",
            "copyAccess": "anyone",
            "copyAccessLevel": "anyone",
            "sharingAccess": "team_members_with_editing_rights"
        },
        "sharingPolicy": {
            "access": "private",
            "inviteToAccountAndBoardLinkAccess": "editor",
            "organizationAccess": "private",
            "teamAccess": "private"
        }
    },
    "sharingPolicy": {
        "access": "private",
        "inviteToAccountAndBoardLinkAccess": "editor",
        "organizationAccess": "private",
        "teamAccess": "private"
    },
    "team": {
        "id": "3458764527568169286",
        "type": "team",
        "name": "test"
    },
    "viewLink": "https://miro.com/app/board/uXjVNWqZHfk="
}

 

Userlevel 2
Badge

Hi @Tim Moser ,

Thank you for reporting this! Unfortunately, we couldn’t reproduce the bug - all the newly created board became editable, while the least recently used one became view-only. 

Could you please share the request that you used for board creation? It might help us to find which parameters might have caused it, if any.

Thanks, 

Elena

Reply