I followed this tutorial Create a Sharepoint List using Rest Api but I had a
message error : "Failed to load resource: the server responded with a status of 403 (Forbidden)"
when I have clicked on the bottom "Create your custom list"
Add a comment
|
2 Answers
Make sure to check(highlighted below) the Allow the add-in to make app-only calls to SharePoint before you deploy the add-in to SharePoint
answered Aug 8, 2016 at 23:08
-
thanks you M.Qassas for your consideration, but that doesn't work. (Already something I don't understand in the tutorial. He says to use Napa, so I don't find those permissions with Napa.) After I have created the add-ins with visual studio in applying your councils but that don't work (always the same error : 403 (forbidden) ), the checkbox must be uncheck like your pictures, and under I must choose "Web" and "Full-Control" ?Mathi– Mathi2016-08-08 23:37:55 +00:00Commented Aug 8, 2016 at 23:37
-
How do you get to these settings? What is the navigation route?bgmCoder– bgmCoder2016-08-09 03:18:59 +00:00Commented Aug 9, 2016 at 3:18
-
Ah - okay, it is in Visual Studio's app manifest.bgmCoder– bgmCoder2016-08-09 03:24:47 +00:00Commented Aug 9, 2016 at 3:24
-
@M.Qassas - I've seen Mathi's code - he's applied that setting, but he's still getting
Forbiddenwhen the addin tries to access the list.bgmCoder– bgmCoder2016-08-09 03:51:40 +00:00Commented Aug 9, 2016 at 3:51
Forbidden error generally occurs because of these two reason-
- Your Form Digest value is not correct.
- The user you are running tests as doesn't have the requisite permissions.
To solve 1 - use $('#__REQUESTDIGEST').val() to get the form digest value.
This code may be helpful for you:
$.ajax({
url: _spPageContextInfo.webAbsoluteUrl + "/_api/web/lists",
type: "POST",
data: JSON.stringify({
'__metadata': { 'type': 'SP.List' }, 'AllowContentTypes': true, 'BaseTemplate': 100,
'ContentTypesEnabled': true, 'Description': 'My list description', 'Title': 'Employees'
}),
headers: {
"accept": "application/json;odata=verbose",
"content-type": "application/json;odata=verbose",
"X-RequestDigest": $("#__REQUESTDIGEST").val()
},
success: onSuccess,
error: onError
});
function onSuccess(data) {
alert(data + ' List Created');
}
function onError(error) {
alert(JSON.stringify(error));
}
To solve case 2 - you have to give the requisite permission. For more Click Here
