Receiving Forbidden 403 when calling /rest/api/3/customField/{field}/option

Tony Farah July 12, 2020

I receive a Forbidden 403 when trying to access the /rest/api/3/customField/{field}/option rest API service even though I am a JIRA Admin and I have Basic Authentication sent in my request.

The full message is: 

<html>
<head>
<meta content="HTML Tidy for Java (vers. 26 Sep 2004), see www.w3.org" name="generator"/>
<title>Forbidden (403)</title>
<!--[if IE]><![endif]-->
<script type="text/javascript">(function() {
var contextPath = '';
var eventBuffer = [];

function printDeprecatedMsg() {
if (console &amp;&amp; console.warn) {
console.warn('DEPRECATED JS - contextPath global variable has been deprecated since 7.4.0. Use `wrm/context-path` module instead.');
}
}

function sendEvent(analytics, postfix) {
analytics.send({
name: 'js.globals.contextPath.' + postfix
});
}

function sendDeprecatedEvent(postfix) {
try {
var analytics = require('jira/analytics');
if (eventBuffer.length) {
eventBuffer.forEach(function(value) {
sendEvent(analytics, value);
});
eventBuffer = [];
}

if (postfix) {
sendEvent(analytics, postfix);
}
} catch(ex) {
eventBuffer.push(postfix);
setTimeout(sendDeprecatedEvent, 1000);
}
}

Object.defineProperty(window, 'contextPath', {
get: function() {
printDeprecatedMsg();
sendDeprecatedEvent('get');
return contextPath;
},
set: function(value) {
printDeprecatedMsg();
sendDeprecatedEvent('set');
contextPath = value;
}
});
})();</script>
<script type="text/javascript">window.WRM=window.WRM||{};window.WRM._unparsedData=window.WRM._unparsedData||{};window.WRM._unparsedErrors=window.WRM._unparsedErrors||{};
WRM._unparsedData["com.atlassian.plugins.atlassian-plugins-webresource-plugin:context-path.context-path"]="\"\"";
WRM._unparsedData["jira.core:feature-flags-data.feature-flag-data"]="{\"enabled-feature-keys\":[\"com.atlassian.jira.agile.darkfeature.editable.detailsview\",\"nps.survey.inline.dialog\",\"com.atlassian.jira.agile.darkfeature.edit.closed.sprint.enabled\",\"jira.plugin.devstatus.phasetwo\",\"jira.frother.reporter.field\",\"atlassian.rest.xsrf.legacy.enabled\",\"jira.issue.status.lozenge\",\"com.atlassian.jira.config.BIG_PIPE\",\"com.atlassian.jira.projects.issuenavigator\",\"com.atlassian.jira.config.PDL\",\"jira.plugin.devstatus.phasetwo.enabled\",\"atlassian.aui.raphael.disabled\",\"app-switcher.new\",\"frother.assignee.field\",\"com.atlassian.jira.projects.ProjectCentricNavigation.Switch\",\"jira.onboarding.cyoa\",\"com.atlassian.jira.agile.darkfeature.kanplan.enabled\",\"com.atlassian.jira.config.ProjectConfig.MENU\",\"com.atlassian.jira.projects.sidebar.DEFER_RESOURCES\",\"com.atlassian.jira.agile.darkfeature.kanplan.epics.and.versions.enabled\",\"com.atlassian.jira.agile.darkfeature.sprint.goal.enabled\",\"jira.zdu.admin-updates-ui\",\"jira.zdu.jmx-monitoring\",\"multiselect.frother.renderer\",\"mail.batching.enabled\",\"sd.new.settings.sidebar.location.disabled\",\"jira.zdu.cluster-upgrade-state\",\"com.atlassian.jira.agile.darkfeature.splitissue\",\"com.atlassian.jira.config.CoreFeatures.LICENSE_ROLES_ENABLED\",\"jira.export.csv.enabled\"],\"feature-flag-states\":{\"mail.batching.override.core\":true,\"com.atlassian.jira.issues.archiving.filters\":false,\"atlassian.cdn.static.assets\":true,\"com.atlassian.jira.issuetable.draggable\":true,\"mail.batching\":false,\"sd.users.and.roles.new.page\":false,\"com.atlassian.jira.diagnostics.perflog\":true,\"com.atlassian.jira.agile.darkfeature.kanban.hide.old.done.issues\":true,\"jira.jql.suggestrecentfields\":false,\"com.atlassian.jira.agile.darkfeature.backlog.showmore\":true,\"com.atlassian.jira.gdpr.rtbf\":false,\"com.atlassian.jira.security.xsrf.session.token\":true,\"jira.priorities.per.project.edit.default\":false,\"com.atlassian.jira.agile.darkfeature.optimistic.transitions\":true,\"com.atlassian.jira.issuetable.move.links.hidden\":true,\"jira.renderer.consider.variable.format\":true,\"com.atlassian.jira.user.dbIdBasedKeyGenerationStrategy\":true,\"com.atlassian.jira.agile.darkfeature.kanplan\":false,\"jira.priorities.per.project.jsd\":true,\"com.atlassian.jira.issues.archiving.browse\":true,\"jira.instrumentation.laas\":false,\"com.atlassian.jira.agile.darkfeature.rapid.boards.bands\":true,\"com.atlassian.jira.sharedEntityEditRights\":true,\"jira.customfields.paginated.ui\":true,\"com.atlassian.jira.agile.darkfeature.flexible.boards\":true,\"com.atlassian.jira.agile.darkfeature.edit.closed.sprint\":false,\"jira.create.linked.issue\":true,\"mail.batching.user.notification\":true,\"com.atlassian.jira.agile.darkfeature.sprint.goal\":false,\"jira.dc.lock.leasing\":true,\"com.atlassian.jira.agile.darkfeature.dataonpageload\":true,\"mail.batching.create.section.cf\":true,\"jira.sal.host.connect.accessor.existing.transaction.will.create.transactions\":true,\"com.atlassian.jira.custom.csv.escaper\":true,\"com.atlassian.jira.plugin.issuenavigator.filtersUxImprovment\":true,\"com.atlassian.jira.agile.darkfeature.kanplan.epics.and.versions\":false,\"external.links.new.window\":true,\"jira.quick.search\":true,\"jira.jql.smartautoselectfirst\":false,\"com.atlassian.jira.projects.per.project.permission.query\":true,\"com.atlassian.jira.issues.archiving\":true,\"index.use.snappy\":true,\"jira.priorities.per.project\":true,\"com.atlassian.jira.upgrade.startup.fix.index\":false}}";
WRM._unparsedData["jira.core:default-comment-security-level-data.DefaultCommentSecurityLevelHelpLink"]="{\"extraClasses\":\"default-comment-level-help\",\"title\":\"Commenting on an Issue\",\"url\":\"https://docs.atlassian.com/jira/jcore-docs-085/Editing+and+collaborating+on+issues#Editingandcollaboratingonissues-restrictacomment\",\"isLocal\":false}";
WRM._unparsedData["com.atlassian.analytics.analytics-client:policy-update-init.policy-update-data-provider"]="false";
WRM._unparsedData["com.atlassian.analytics.analytics-client:programmatic-analytics-init.programmatic-analytics-data-provider"]="false";
WRM._unparsedData["jira.core:dateFormatProvider.allFormats"]="{\"dateFormats\":{\"meridiem\":[\"AM\",\"PM\"],\"eras\":[\"BC\",\"AD\"],\"months\":[\"January\",\"February\",\"March\",\"April\",\"May\",\"June\",\"July\",\"August\",\"September\",\"October\",\"November\",\"December\"],\"monthsShort\":[\"Jan\",\"Feb\",\"Mar\",\"Apr\",\"May\",\"Jun\",\"Jul\",\"Aug\",\"Sep\",\"Oct\",\"Nov\",\"Dec\"],\"weekdaysShort\":[\"Sun\",\"Mon\",\"Tue\",\"Wed\",\"Thu\",\"Fri\",\"Sat\"],\"weekdays\":[\"Sunday\",\"Monday\",\"Tuesday\",\"Wednesday\",\"Thursday\",\"Friday\",\"Saturday\"]},\"lookAndFeelFormats\":{\"relativize\":\"true\",\"time\":\"h:mm a\",\"day\":\"EEEE h:mm a\",\"dmy\":\"dd/MMM/yy\",\"complete\":\"dd/MMM/yy h:mm a\"}}";
WRM._unparsedData["jira.core:avatar-picker-data.data"]="{}";
WRM._unparsedData["com.atlassian.jira.jira-header-plugin:dismissedFlags.flags"]="{\"dismissed\":[]}";
WRM._unparsedData["com.atlassian.jira.jira-header-plugin:newsletter-signup-tip-init.newsletterSignup"]="{\"signupDescription\":\"Get updates, inspiration and best practices from the team behind Jira.\",\"formUrl\":\"https://www.atlassian.com/apis/exact-target/{0}/subscribe?mailingListId=1401671\",\"signupTitle\":\"Sign up!\",\"signupId\":\"newsletter-signup-tip\",\"showNewsletterTip\":false}";
WRM._unparsedData["com.atlassian.jira.project-templates-plugin:project-templates-plugin-resources.ptAnalyticsData"]="{\"instanceCreatedDate\":\"2020-02-12\"}";
WRM._unparsedData["jira.core:user-message-flags-data.adminLockout"]="{}";
WRM._unparsedData["com.atlassian.plugins.helptips.jira-help-tips:help-tip-manager.JiraHelpTipData"]="{\"anonymous\":true}";
if(window.WRM._dataArrived)window.WRM._dataArrived();</script>
<link media="all" data-wrm-batch-type="context" data-wrm-key="_super" href="/s/a74df5f9b3527d2b4489df86a7047cdb-CDN/-efcqho/805003/6411e0087192541a09d88223fb51a6a0/e5dce8c22f35f6ae877a09c446155e80/_/download/contextbatch/css/_super/batch.css" rel="stylesheet" type="text/css"/>
<link media="all" data-wrm-batch-type="context" data-wrm-key="atl.general,jira.global,jira.general,-_super" href="/s/2bb930ae37b059d47f40f9b5b60e4849-CDN/-efcqho/805003/6411e0087192541a09d88223fb51a6a0/f6faf983930c1524694fc8d6a542d8b3/_/download/contextbatch/css/atl.general,jira.global,jira.general,-_super/batch.css?agile_global_admin_condition=true&amp;jag=true" rel="stylesheet" type="text/css"/>
<link media="all" data-wrm-batch-type="resource" data-wrm-key="com.atlassian.auiplugin:split_aui.pattern.label" href="/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-efcqho/805003/6411e0087192541a09d88223fb51a6a0/8.5.0/_/download/batch/com.atlassian.auiplugin:split_aui.pattern.label/com.atlassian.auiplugin:split_aui.pattern.label.css" rel="stylesheet" type="text/css"/>
<link media="all" data-wrm-batch-type="resource" data-wrm-key="jira.webresources:global-static-adgs" href="/s/5af083bd9a7e4fb9eb6c3205e1999ad9-CDN/-efcqho/805003/6411e0087192541a09d88223fb51a6a0/1.0/_/download/batch/jira.webresources:global-static-adgs/jira.webresources:global-static-adgs.css" rel="stylesheet" type="text/css"/>
<link media="all" data-wrm-batch-type="resource" data-wrm-key="jira.webresources:global-static" href="/s/bda38bfcfb6b0ee821f024b94037dd10-CDN/-efcqho/805003/6411e0087192541a09d88223fb51a6a0/1.0/_/download/batch/jira.webresources:global-static/jira.webresources:global-static.css" rel="stylesheet" type="text/css"/>
<script data-initially-rendered="data-initially-rendered" data-wrm-batch-type="context" data-wrm-key="_super" src="/s/2af12fe98a561841e510942053868caa-CDN/-efcqho/805003/6411e0087192541a09d88223fb51a6a0/e5dce8c22f35f6ae877a09c446155e80/_/download/contextbatch/js/_super/batch.js?locale=en-US" type="text/javascript"/>
<script data-initially-rendered="data-initially-rendered" data-wrm-batch-type="context" data-wrm-key="atl.general,jira.global,jira.general,-_super" src="/s/a6305b6fb6d8c64022295826085bdb82-CDN/-efcqho/805003/6411e0087192541a09d88223fb51a6a0/f6faf983930c1524694fc8d6a542d8b3/_/download/contextbatch/js/atl.general,jira.global,jira.general,-_super/batch.js?agile_global_admin_condition=true&amp;jag=true&amp;locale=en-US" type="text/javascript"/>
<script data-initially-rendered="data-initially-rendered" data-wrm-batch-type="context" data-wrm-key="atl.global,-_super" src="/s/91853a22a6e112eb49e0c1f45b59380b-CDN/-efcqho/805003/6411e0087192541a09d88223fb51a6a0/2bb539d4cc0a1e2fb4ffe58f91375575/_/download/contextbatch/js/atl.global,-_super/batch.js?locale=en-US" type="text/javascript"/>
<script data-initially-rendered="data-initially-rendered" data-wrm-batch-type="resource" data-wrm-key="com.atlassian.auiplugin:split_aui.pattern.label" src="/s/07ee7fa41b5632c9c2bc3df6e19168d5-CDN/-efcqho/805003/6411e0087192541a09d88223fb51a6a0/8.5.0/_/download/batch/com.atlassian.auiplugin:split_aui.pattern.label/com.atlassian.auiplugin:split_aui.pattern.label.js?locale=en-US" type="text/javascript"/>
<link media="all" data-wrm-batch-type="context" data-wrm-key="jira.global.look-and-feel,-_super" href="/s/da5b2492af2e2dba763d7f29a2cedbf0-CDN/-efcqho/805003/6411e0087192541a09d88223fb51a6a0/1a5a1931ff8c558b9b138b6ac226bb33/_/download/contextbatch/css/jira.global.look-and-feel,-_super/batch.css" rel="stylesheet" type="text/css"/>
<script src="/rest/api/1.0/shortcuts/805003/bdc252c50755a10a5a9e8b3cc1e786dc/shortcuts.js" type="text/javascript"/>
<meta data-version="8.5.3" data-name="jira" content="JIRA" name="application-name"/>
</head>
<body data-version="8.5.3" class="aui-layout aui-style-default page-type-message" id="jira">
<div class="aui-page-panel">
<div class="aui-page-panel-inner">
<div class="aui-page-header-inner">
<div class="aui-page-header-main">
<h1>Forbidden (403)</h1>
</div>
<!--.aui-page-header-main-->
</div>
<!--.aui-page-header-inner-->
<!--.aui-page-header-->
<div class="aui-message aui-message-warning warning">
<p>
Encountered a
<code>"403 - Forbidden"</code>
error while loading this page.
</p>
<p>
<a href="/secure/MyJiraHome.jspa">Go to Jira home</a>
</p>
</div>
<!--.aui-page-panel-content-->
</div>
<!--.aui-page-panel-inner-->
</div>
<!--.aui-page-panel-->
</body>
</html>

1 answer

0 votes
wwalser
Atlassian Team
Atlassian Team members are employees working across the company in a wide variety of roles.
July 13, 2020

I receive a Forbidden 403 when trying to access the /rest/api/3/customField/{field}/option rest API service even though I am a JIRA Admin and I have Basic Authentication sent in my request.

A few things to help clarify the question:

I see a version number, 8.5.3, in the above content so I presume this is Jira server?

What is doing this request, Jira Automation?

May I see the configuration of whatever is doing said request?

wwalser
Atlassian Team
Atlassian Team members are employees working across the company in a wide variety of roles.
July 14, 2020

In the meantime, this help article may provide some helpful pointers: https://confluence.atlassian.com/stashkb/unable-to-connect-to-jira-for-authentication-forbidden-403-323391874.html

Also, you may want to check to see if you can do the same request via curl. That is often illuminating.

Suggest an answer

Log in or Sign up to answer
TAGS
AUG Leaders

Atlassian Community Events