UserUnauthorizedException - Status Code 403

[tmanney (Theresa)]

Hey hey -
Before October 2024, users of a custom form a developer created were able to fill out the form, submitting the form would cause a chain reaction of updates with lots of boards. When I started working on this project, the only way to submit this form was if you are a board owner. This was not the case previously. We don’t want everyone to be a board owner because that will give employees too much accessibilty to change whatever they want (likely by accident). Was there a change in Monday.com that caused board owners to be the only ones who can make changes? Can someone here help me understand how I might be able to manage permissions better?

This is the error we are encountering for all the non-board owners:

{
    "errors": [
        {
            "message": "User unauthorized to perform action",
            "locations": [
                {
                    "line": 1,
                    "column": 10
                }
            ],
            "path": [
                "create_item"
            ],
            "extensions": {
                "code": "UserUnauthorizedException",
                "status_code": 403,
                "error_data": {}
            }
        }
    ],
    "status_code": 403,
    "error_data": {},
    "error_code": "UserUnauthorizedException",
    "error_message": "User unauthorized to perform action",
    "account_id": <my account id>
}

[tmanney (Theresa)]

I was able to get past this issue on my own.
In the board specific permissions section, I had to select “Edit everything”, originally our settings for board members had “Only edit content” selected. Once “Edit everything” was selected, I got more specific with my board member level permissions, mostly making it so no one can delete items that they didn’t create.