Forum Discussion

AusSmiley's avatar
AusSmiley
Contributing User
17 days ago

Changes to login to use SCOPE - not working for users who are not MYOB administrators

I have just implemented the Scope changes required for September 1.

My MYOB Administrator has authorised the app for the required scopes, and can log in and perform the required actions. 

We have other app users who are NOT MYOB company/ledger administrators, but are MYOB users. On logging into MYOB via the app, they are being given the popup to approve the scope access to the ledger. As they are not administrators, it warns them as such, but they are then unable to complete the MYOB login, and return to the app to do their job. I did NOT put the prompt=consent attribute on their login to myob from the app.

URL being accessed by non-administrator users is:

https://secure.myob.com/oauth2/account/authorize?response_type=code&scope=sme-company-file%20sme-contacts-customer%20sme-contacts-employee%20sme-sales%20sme-inventory%20sme-general-ledger&client_id=--clients-id---&redirect_uri=--myredirect---&state=--mystate--

 

administrator used this link to authorise: (forces the consent prompt)

https://secure.myob.com/oauth2/account/authorize?response_type=code&scope=sme-company-file%20sme-contacts-customer%20sme-contacts-employee%20sme-sales%20sme-inventory%20sme-general-ledger&client_id=--clients-id--&prompt=consent&redirect_uri==--myredirect---&state=--mystate--

 

Can someone from MYOB please let me know how my non-MYOB administrator users can log in to myob from the app now the consent has been given by the adminstrator?

 

Regards

Brigette Gonch

2 Replies

  • The_Doc's avatar
    The_Doc
    Ultimate Cover User
    8 days ago

    Hi AusSmiley​, Marcus_Wolfe​ 

     

    Likely this correct - i.e. you now have to be an administrator - luckily for me - all my clients have made me an administrator in their files so this change has just worked fine for me - actually it didn't even ask me to authorise interestingly - just worked as before.

     

    However, here is a suggestion which works for administrator required function on server users - make the user a temp administrator - let them authorise - then remove the administrator rights - might work - likely to work.

     

    The Doc

  • Marcus_Wolfe's avatar
    Marcus_Wolfe
    Experienced Cover User
    8 days ago

    Hi Brigette, I'm not from MYOB, just another programmer, but I think what you've observed is how it's supposed to work now. You have to be an administrator to log in. That's just from the little information available in this community and MYOB API Support pages. I've got the same issue and don't know what I'm going to do