Level up your Box knowledge with brand new learning paths on Box University. Visit training.box.com to get started

Box Status

Box scope for search bar

Answered
Follow
New post
NoamShoef

Hi,

I created an embed box UI element which enable to view and download only.
The element works perfectly fine apart from the top search bar which returns an 403 error in the request saying the scopes of the token are not high enough.
I tried to understand which scope do I need to add but I couldn't find.
At the moment I have: base_explorer, item_preview, item_download.

Thanks

 

0

Comments

6 comments

Date Votes
  • jcleblanc

    Hi ,

     

    I ran a few tests myself using the content explorer and a JWT application, with all available scopes, and I was able to replicate the error as well. From what I can see this doesn't affect apps that are using a developer token, and appears to be related to the token downscoping process.

     

    In speaking with the internal Elements folks it appears that the issue resides in the item_preview scope. There is currently an internal ticket open to fix this, but I don't currently have an ETA. Our apologies for the inconvenience, we'll do our best to get it remedied. 

     

    - Jon

     

     

    0
    Comment actions Permalink
  • sgdimitris

    Hi ,

     

    We are busy with integration between Salesforce and Box and we are facing the same issue with the search functionality and the down scoped tokens.

    We would like to ask if there is any update regarding this bug?

     

    Best regards,

    0
    Comment actions Permalink
  • andrew_holbrook

    I'll echo the same.  I can only search by giving a fully scoped token...which makes down-scoping now useless.

     

    Thanks! 

    0
    Comment actions Permalink
  • AgilePointEMEA

    After a year later, the problem still exists. Any update on this?

    0
    Comment actions Permalink
  • jcleblanc

     The cause of this one is related to the need for write based permissions in the scopes. Add root_readwrite to the scope list and it'll solve the problem.

     

    On the documentation side we are currently working on rewriting / rebuilding the content of the developer site (the first iteration of the API docs was launched a few months back to https://box.dev ). Over the coming months the elements documentation will be worked on heavily to make information like this more transparent.

     

    - Jon

    0
    Comment actions Permalink
  • AgilePointEMEA

    Thanks Jon, that did the trick.

     

    Kind regards

    0
    Comment actions Permalink

Please sign in to leave a comment.