API with group permission does not work?

[cfelbertp]

As I didn't receive any support from Wiki.js maybe someone here knows a solution:

I enabled the API access, created a key with full access and got the content of a single page, e.g.:

{
  pages {
    single (id: 15) {
      path
      title
      content
      createdAt
      updatedAt
    }
  }
}

Then I created a new API key and selected a group for permissions. I assigned all available permission in the content section.

Under page rules, I configured the following:

Allow read:pages, read:source, read:history, read:asset
Path starts with | any locale | /

When posting the request, I receive a 200: 'You are not authorized to view this page.' It does not matter what id I use. I also tried to configure the exact path of pages I tried to fetch.

Fetching the list of all pages, however, works with this API key:

{
  pages {
    list (orderBy: TITLE) {
      id
      path
      title
    }
  }
}

I use Wiki.js 2.5.298 and Cloudron 7.3.6.

Many thanks!

[girish]

@cfelbertp Seems something wiki.js specific. Have you asked at https://github.com/Requarks/wiki/discussions already ?

[cfelbertp]

@girish Yes, weeks ago, but I didn't get any helpful feedback: https://github.com/requarks/wiki/discussions/6216

I don't even know if this is a bug or if I'm just not smart enough to configure it.