User with correct permissions getting (403) Forbidden error creating new list through API

[BrandyF73]

With an existing user, we're getting a 403 (Forbidden) from the /lists/ endpoint when trying to POST a new list, using the V2 API.  

In checking the account/user/privileges endpoint,  we have the rights to create a new list.  

Verified this user can create a new list within Constant Contact directly.

We are able to successfully export contacts using the /activities/addcontacts/ endpoint.

Verified it is still working as designed on our end.   

First noticed the issue on Nov 6, last week.

Thanks,

Brandy Harvey

Xero

brandy.harvey@xero.com

[Elijah_G · Accepted solution]

Hi Brandy,

Thank you for reporting this issue! In this case what you are seeing is something that we have in our backlog of work to correct where the permissions check for the lists endpoint fails when a trailing slash is present. While our documentation does not specify that a trailing slash can/should be used for API endpoints, we do intend to allow this behavior as it works on other endpoints without issue.

Fortunately, there is a very easy workaround for this issue, and that is to simply remove the trailing slash from your URL when creating lists. You would end up calling https://api.constantcontact.com/v2/lists instead of https://api.constantcontact.com/v2/lists/.

If you have any questions, please let me know!

Sincerely,

[BrandyF73]

Thanks Elijah, we'll give that a try!

[BrandyF73]

Have confirmed in our Staging env that saving to a new list is successful now.

[Elijah_G]

Hi Brandy,

Thank you for the confirmation! If you see any other unusual behavior or have any issues, please feel free to reach out to us!

Sincerely,