[wp-trac] [WordPress Trac] #39839: Permissions processed differently between REST API and UI access causing 403 error

[WordPress Trac]

#39839: Permissions processed differently between REST API and UI access causing
403 error
-------------------------------+------------------------------
 Reporter:  reldev             |       Owner:
     Type:  defect (bug)       |      Status:  new
 Priority:  normal             |   Milestone:  Awaiting Review
Component:  REST API           |     Version:  4.7.2
 Severity:  normal             |  Resolution:
 Keywords:  reporter-feedback  |     Focuses:
-------------------------------+------------------------------

Comment (by rmccue):

 From a quick glance, it seems that you might not be passing the nonce with
 the request: https://developer.wordpress.org/rest-api/using-the-rest-
 api/authentication/#cookie-authentication

 If you don't pass the nonce, the request will be treated as an
 unauthenticated request, and will give you the behaviour you're seeing
 here.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/39839#comment:5>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform