REST API access to sys_journal_field table for a non-admin user is denied

[mikek1]

Just as the title suggests I am having issues setting up access to the sys_journal_field table for an API user.  Is there a specific role other than 'admin' that can be used to access this API table?  I've also tried to set up an ACL to this record but this doesn't seem to do anything for API access.

[mikek1]

I actually figured this out after a few hours.  The proper ACL record is incident.work_notes.  This is pretty confusing IMO and can probably be documented better.

[Krishna74]

Hi @mikek, I am facing a similar issue where an admin is unable to pull all work_notes for a Customer Service case from sys_journal_field table through a scripted REST api.

Where did you configure the incident.work_notes ACL field to grant access to work notes? I am assuming there might be a customer_service.wotk_notes in the same place for my needs..

[mikek1 · Accepted solution]

I was actually wrong.  The proper ACL to configure API access is sys_journal_field.  Create the ACL and activate it.  Type: Record, Operation: Read, apply it to whatever role you want.