[SOLVED] API access right issue fetching object history

Hello,

Going deeper into the use of the Projeqtor API, we've hit an issue related to access rights.
Maybe related to this topic ? www.projeqtor.org/fr/forum-fr/2-submit-i...ements-access-rights 

With the following query :
- The solution works great for a user with administrative account
- When trying the same request with a Project Leader account, result is :
  - empty result if the {{ticketID}} belongs to a project the user has access to
  - valid result if the {{ticketID}} belongs to a project the user does not have access to

=> So in fact the PL can get data from tickets that he does not have access to.

 

Great, thanks

Extra info: if I'm not mistaken, the same issue applies to Notes as well.