Changes to login to use SCOPE - not working for users who are not MYOB administrators
I have just implemented the Scope changes required for September 1.
My MYOB Administrator has authorised the app for the required scopes, and can log in and perform the required actions.
We have other app users who are NOT MYOB company/ledger administrators, but are MYOB users. On logging into MYOB via the app, they are being given the popup to approve the scope access to the ledger. As they are not administrators, it warns them as such, but they are then unable to complete the MYOB login, and return to the app to do their job. I did NOT put the prompt=consent attribute on their login to myob from the app.
URL being accessed by non-administrator users is:
https://secure.myob.com/oauth2/account/authorize?response_type=code&scope=sme-company-file%20sme-contacts-customer%20sme-contacts-employee%20sme-sales%20sme-inventory%20sme-general-ledger&client_id=--clients-id---&redirect_uri=--myredirect---&state=--mystate--
administrator used this link to authorise: (forces the consent prompt)
https://secure.myob.com/oauth2/account/authorize?response_type=code&scope=sme-company-file%20sme-contacts-customer%20sme-contacts-employee%20sme-sales%20sme-inventory%20sme-general-ledger&client_id=--clients-id--&prompt=consent&redirect_uri==--myredirect---&state=--mystate--
Can someone from MYOB please let me know how my non-MYOB administrator users can log in to myob from the app now the consent has been given by the adminstrator?
Regards
Brigette Gonch