I receive a Forbidden 403 when trying to access the /rest/api/3/customField/{field}/option rest API service even though I am a JIRA Admin and I have Basic Authentication sent in my request.
The full message is:
<html>
<head>
<meta content="HTML Tidy for Java (vers. 26 Sep 2004), see www.w3.org" name="generator"/>
<title>Forbidden (403)</title>
<!--[if IE]><![endif]-->
<script type="text/javascript">(function() {
var contextPath = '';
var eventBuffer = [];
function printDeprecatedMsg() {
if (console && console.warn) {
console.warn('DEPRECATED JS - contextPath global variable has been deprecated since 7.4.0. Use `wrm/context-path` module instead.');
}
}
function sendEvent(analytics, postfix) {
analytics.send({
name: 'js.globals.contextPath.' + postfix
});
}
function sendDeprecatedEvent(postfix) {
try {
var analytics = require('jira/analytics');
if (eventBuffer.length) {
eventBuffer.forEach(function(value) {
sendEvent(analytics, value);
});
eventBuffer = [];
}
if (postfix) {
sendEvent(analytics, postfix);
}
} catch(ex) {
eventBuffer.push(postfix);
setTimeout(sendDeprecatedEvent, 1000);
}
}
Object.defineProperty(window, 'contextPath', {
get: function() {
printDeprecatedMsg();
sendDeprecatedEvent('get');
return contextPath;
},
set: function(value) {
printDeprecatedMsg();
sendDeprecatedEvent('set');
contextPath = value;
}
});
})();</script>
<script type="text/javascript">window.WRM=window.WRM||{};window.WRM._unparsedData=window.WRM._unparsedData||{};window.WRM._unparsedErrors=window.WRM._unparsedErrors||{};
WRM._unparsedData["com.atlassian.plugins.atlassian-plugins-webresource-plugin:context-path.context-path"]="\"\"";
WRM._unparsedData["jira.core:feature-flags-data.feature-flag-data"]="{\"enabled-feature-keys\":[\"com.atlassian.jira.agile.darkfeature.editable.detailsview\",\"nps.survey.inline.dialog\",\"com.atlassian.jira.agile.darkfeature.edit.closed.sprint.enabled\",\"jira.plugin.devstatus.phasetwo\",\"jira.frother.reporter.field\",\"atlassian.rest.xsrf.legacy.enabled\",\"jira.issue.status.lozenge\",\"com.atlassian.jira.config.BIG_PIPE\",\"com.atlassian.jira.projects.issuenavigator\",\"com.atlassian.jira.config.PDL\",\"jira.plugin.devstatus.phasetwo.enabled\",\"atlassian.aui.raphael.disabled\",\"app-switcher.new\",\"frother.assignee.field\",\"com.atlassian.jira.projects.ProjectCentricNavigation.Switch\",\"jira.onboarding.cyoa\",\"com.atlassian.jira.agile.darkfeature.kanplan.enabled\",\"com.atlassian.jira.config.ProjectConfig.MENU\",\"com.atlassian.jira.projects.sidebar.DEFER_RESOURCES\",\"com.atlassian.jira.agile.darkfeature.kanplan.epics.and.versions.enabled\",\"com.atlassian.jira.agile.darkfeature.sprint.goal.enabled\",\"jira.zdu.admin-updates-ui\",\"jira.zdu.jmx-monitoring\",\"multiselect.frother.renderer\",\"mail.batching.enabled\",\"sd.new.settings.sidebar.location.disabled\",\"jira.zdu.cluster-upgrade-state\",\"com.atlassian.jira.agile.darkfeature.splitissue\",\"com.atlassian.jira.config.CoreFeatures.LICENSE_ROLES_ENABLED\",\"jira.export.csv.enabled\"],\"feature-flag-states\":{\"mail.batching.override.core\":true,\"com.atlassian.jira.issues.archiving.filters\":false,\"atlassian.cdn.static.assets\":true,\"com.atlassian.jira.issuetable.draggable\":true,\"mail.batching\":false,\"sd.users.and.roles.new.page\":false,\"com.atlassian.jira.diagnostics.perflog\":true,\"com.atlassian.jira.agile.darkfeature.kanban.hide.old.done.issues\":true,\"jira.jql.suggestrecentfields\":false,\"com.atlassian.jira.agile.darkfeature.backlog.showmore\":true,\"com.atlassian.jira.gdpr.rtbf\":false,\"com.atlassian.jira.security.xsrf.session.token\":true,\"jira.priorities.per.project.edit.default\":false,\"com.atlassian.jira.agile.darkfeature.optimistic.transitions\":true,\"com.atlassian.jira.issuetable.move.links.hidden\":true,\"jira.renderer.consider.variable.format\":true,\"com.atlassian.jira.user.dbIdBasedKeyGenerationStrategy\":true,\"com.atlassian.jira.agile.darkfeature.kanplan\":false,\"jira.priorities.per.project.jsd\":true,\"com.atlassian.jira.issues.archiving.browse\":true,\"jira.instrumentation.laas\":false,\"com.atlassian.jira.agile.darkfeature.rapid.boards.bands\":true,\"com.atlassian.jira.sharedEntityEditRights\":true,\"jira.customfields.paginated.ui\":true,\"com.atlassian.jira.agile.darkfeature.flexible.boards\":true,\"com.atlassian.jira.agile.darkfeature.edit.closed.sprint\":false,\"jira.create.linked.issue\":true,\"mail.batching.user.notification\":true,\"com.atlassian.jira.agile.darkfeature.sprint.goal\":false,\"jira.dc.lock.leasing\":true,\"com.atlassian.jira.agile.darkfeature.dataonpageload\":true,\"mail.batching.create.section.cf\":true,\"jira.sal.host.connect.accessor.existing.transaction.will.create.transactions\":true,\"com.atlassian.jira.custom.csv.escaper\":true,\"com.atlassian.jira.plugin.issuenavigator.filtersUxImprovment\":true,\"com.atlassian.jira.agile.darkfeature.kanplan.epics.and.versions\":false,\"external.links.new.window\":true,\"jira.quick.search\":true,\"jira.jql.smartautoselectfirst\":false,\"com.atlassian.jira.projects.per.project.permission.query\":true,\"com.atlassian.jira.issues.archiving\":true,\"index.use.snappy\":true,\"jira.priorities.per.project\":true,\"com.atlassian.jira.upgrade.startup.fix.index\":false}}";
WRM._unparsedData["jira.core:default-comment-security-level-data.DefaultCommentSecurityLevelHelpLink"]="{\"extraClasses\":\"default-comment-level-help\",\"title\":\"Commenting on an Issue\",\"url\":\"https://docs.atlassian.com/jira/jcore-docs-085/Editing+and+collaborating+on+issues#Editingandcollaboratingonissues-restrictacomment\",\"isLocal\":false}";
WRM._unparsedData["com.atlassian.analytics.analytics-client:policy-update-init.policy-update-data-provider"]="false";
WRM._unparsedData["com.atlassian.analytics.analytics-client:programmatic-analytics-init.programmatic-analytics-data-provider"]="false";
WRM._unparsedData["jira.core:dateFormatProvider.allFormats"]="{\"dateFormats\":{\"meridiem\":[\"AM\",\"PM\"],\"eras\":[\"BC\",\"AD\"],\"months\":[\"January\",\"February\",\"March\",\"April\",\"May\",\"June\",\"July\",\"August\",\"September\",\"October\",\"November\",\"December\"],\"monthsShort\":[\"Jan\",\"Feb\",\"Mar\",\"Apr\",\"May\",\"Jun\",\"Jul\",\"Aug\",\"Sep\",\"Oct\",\"Nov\",\"Dec\"],\"weekdaysShort\":[\"Sun\",\"Mon\",\"Tue\",\"Wed\",\"Thu\",\"Fri\",\"Sat\"],\"weekdays\":[\"Sunday\",\"Monday\",\"Tuesday\",\"Wednesday\",\"Thursday\",\"Friday\",\"Saturday\"]},\"lookAndFeelFormats\":{\"relativize\":\"true\",\"time\":\"h:mm a\",\"day\":\"EEEE h:mm a\",\"dmy\":\"dd/MMM/yy\",\"complete\":\"dd/MMM/yy h:mm a\"}}";
WRM._unparsedData["jira.core:avatar-picker-data.data"]="{}";
WRM._unparsedData["com.atlassian.jira.jira-header-plugin:dismissedFlags.flags"]="{\"dismissed\":[]}";
WRM._unparsedData["com.atlassian.jira.jira-header-plugin:newsletter-signup-tip-init.newsletterSignup"]="{\"signupDescription\":\"Get updates, inspiration and best practices from the team behind Jira.\",\"formUrl\":\"https://www.atlassian.com/apis/exact-target/{0}/subscribe?mailingListId=1401671\",\"signupTitle\":\"Sign up!\",\"signupId\":\"newsletter-signup-tip\",\"showNewsletterTip\":false}";
WRM._unparsedData["com.atlassian.jira.project-templates-plugin:project-templates-plugin-resources.ptAnalyticsData"]="{\"instanceCreatedDate\":\"2020-02-12\"}";
WRM._unparsedData["jira.core:user-message-flags-data.adminLockout"]="{}";
WRM._unparsedData["com.atlassian.plugins.helptips.jira-help-tips:help-tip-manager.JiraHelpTipData"]="{\"anonymous\":true}";
if(window.WRM._dataArrived)window.WRM._dataArrived();</script>
<link media="all" data-wrm-batch-type="context" data-wrm-key="_super" href="/s/a74df5f9b3527d2b4489df86a7047cdb-CDN/-efcqho/805003/6411e0087192541a09d88223fb51a6a0/e5dce8c22f35f6ae877a09c446155e80/_/download/contextbatch/css/_super/batch.css" rel="stylesheet" type="text/css"/>
<link media="all" data-wrm-batch-type="context" data-wrm-key="atl.general,jira.global,jira.general,-_super" href="/s/2bb930ae37b059d47f40f9b5b60e4849-CDN/-efcqho/805003/6411e0087192541a09d88223fb51a6a0/f6faf983930c1524694fc8d6a542d8b3/_/download/contextbatch/css/atl.general,jira.global,jira.general,-_super/batch.css?agile_global_admin_condition=true&jag=true" rel="stylesheet" type="text/css"/>
<link media="all" data-wrm-batch-type="resource" data-wrm-key="com.atlassian.auiplugin:split_aui.pattern.label" href="/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-efcqho/805003/6411e0087192541a09d88223fb51a6a0/8.5.0/_/download/batch/com.atlassian.auiplugin:split_aui.pattern.label/com.atlassian.auiplugin:split_aui.pattern.label.css" rel="stylesheet" type="text/css"/>
<link media="all" data-wrm-batch-type="resource" data-wrm-key="jira.webresources:global-static-adgs" href="/s/5af083bd9a7e4fb9eb6c3205e1999ad9-CDN/-efcqho/805003/6411e0087192541a09d88223fb51a6a0/1.0/_/download/batch/jira.webresources:global-static-adgs/jira.webresources:global-static-adgs.css" rel="stylesheet" type="text/css"/>
<link media="all" data-wrm-batch-type="resource" data-wrm-key="jira.webresources:global-static" href="/s/bda38bfcfb6b0ee821f024b94037dd10-CDN/-efcqho/805003/6411e0087192541a09d88223fb51a6a0/1.0/_/download/batch/jira.webresources:global-static/jira.webresources:global-static.css" rel="stylesheet" type="text/css"/>
<script data-initially-rendered="data-initially-rendered" data-wrm-batch-type="context" data-wrm-key="_super" src="/s/2af12fe98a561841e510942053868caa-CDN/-efcqho/805003/6411e0087192541a09d88223fb51a6a0/e5dce8c22f35f6ae877a09c446155e80/_/download/contextbatch/js/_super/batch.js?locale=en-US" type="text/javascript"/>
<script data-initially-rendered="data-initially-rendered" data-wrm-batch-type="context" data-wrm-key="atl.general,jira.global,jira.general,-_super" src="/s/a6305b6fb6d8c64022295826085bdb82-CDN/-efcqho/805003/6411e0087192541a09d88223fb51a6a0/f6faf983930c1524694fc8d6a542d8b3/_/download/contextbatch/js/atl.general,jira.global,jira.general,-_super/batch.js?agile_global_admin_condition=true&jag=true&locale=en-US" type="text/javascript"/>
<script data-initially-rendered="data-initially-rendered" data-wrm-batch-type="context" data-wrm-key="atl.global,-_super" src="/s/91853a22a6e112eb49e0c1f45b59380b-CDN/-efcqho/805003/6411e0087192541a09d88223fb51a6a0/2bb539d4cc0a1e2fb4ffe58f91375575/_/download/contextbatch/js/atl.global,-_super/batch.js?locale=en-US" type="text/javascript"/>
<script data-initially-rendered="data-initially-rendered" data-wrm-batch-type="resource" data-wrm-key="com.atlassian.auiplugin:split_aui.pattern.label" src="/s/07ee7fa41b5632c9c2bc3df6e19168d5-CDN/-efcqho/805003/6411e0087192541a09d88223fb51a6a0/8.5.0/_/download/batch/com.atlassian.auiplugin:split_aui.pattern.label/com.atlassian.auiplugin:split_aui.pattern.label.js?locale=en-US" type="text/javascript"/>
<link media="all" data-wrm-batch-type="context" data-wrm-key="jira.global.look-and-feel,-_super" href="/s/da5b2492af2e2dba763d7f29a2cedbf0-CDN/-efcqho/805003/6411e0087192541a09d88223fb51a6a0/1a5a1931ff8c558b9b138b6ac226bb33/_/download/contextbatch/css/jira.global.look-and-feel,-_super/batch.css" rel="stylesheet" type="text/css"/>
<script src="/rest/api/1.0/shortcuts/805003/bdc252c50755a10a5a9e8b3cc1e786dc/shortcuts.js" type="text/javascript"/>
<meta data-version="8.5.3" data-name="jira" content="JIRA" name="application-name"/>
</head>
<body data-version="8.5.3" class="aui-layout aui-style-default page-type-message" id="jira">
<div class="aui-page-panel">
<div class="aui-page-panel-inner">
<div class="aui-page-header-inner">
<div class="aui-page-header-main">
<h1>Forbidden (403)</h1>
</div>
<!--.aui-page-header-main-->
</div>
<!--.aui-page-header-inner-->
<!--.aui-page-header-->
<div class="aui-message aui-message-warning warning">
<p>
Encountered a
<code>"403 - Forbidden"</code>
error while loading this page.
</p>
<p>
<a href="/secure/MyJiraHome.jspa">Go to Jira home</a>
</p>
</div>
<!--.aui-page-panel-content-->
</div>
<!--.aui-page-panel-inner-->
</div>
<!--.aui-page-panel-->
</body>
</html>
> I receive a Forbidden 403 when trying to access the /rest/api/3/customField/{field}/option rest API service even though I am a JIRA Admin and I have Basic Authentication sent in my request.
A few things to help clarify the question:
I see a version number, 8.5.3, in the above content so I presume this is Jira server?
What is doing this request, Jira Automation?
May I see the configuration of whatever is doing said request?
In the meantime, this help article may provide some helpful pointers: https://confluence.atlassian.com/stashkb/unable-to-connect-to-jira-for-authentication-forbidden-403-323391874.html
Also, you may want to check to see if you can do the same request via curl. That is often illuminating.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.