HTTP 403 error on PayrollRunByPayrollRunId on Loket: Client does not have access to activity

Questions
,
1

Some of the avaliable objects (example PayrollRunByPayrollRunId) gives me a “HTTP 403” and “insufficient rights” error.

The owner of the account in loket say they cannot change the permissions.

Does anyone know how manages this?

2

Please specify the full error message and query, including the itgen... message code.

3

The query:

select *
from   LoketNlRest.PayrollRun.PayrollRunByPayrollRunId (payrollRunId => 'validId')
limit  1000

raises:

itgenlnr005
Error message:
Insufficient rights for this request, reason: “Client does not have access to activity.”.
The remote server returned an error: (403) Forbidden.

4

“Client” here means “client application”: a registration of an OAuth app by Invantive on the Loket-cloud.

The original Loket error is:

Client does not have access to activity.

See Loket: tabelnaam voor GetRunOverviewsByPayrollRunId endpoint - 4 van forums for a similar problem.

We have raised a request #209327 at Loket to grant the client application of Invantive access to this endpoint:

When found that approval is possible, it can take several weeks to approve and released into production. There is no code change necessary at Invantive for the additional privileges.

5

The change has been very quickly approved and applied, great!

The Invantive clients now have access to these scopes. Please re-run your query.

Please note that the Loket user used must have at least the privilege “Raadplegen loonoutput beperkt” for this call to succeed.

6

Hi Again.

Could the same procedure (raise an approval request at Loket to grant access) be done to the following to tables:

JournalRunsByPayrollAdministrationId
JournalRunResultsByJournalRunId

7

And also this one : SepaFilesByPayrollRunId

8

Een bericht is gesplitst naar een nieuw topic: Loket privileges

9

The maintenance of the Loket scopes is quite a burden due to the work needed and the number of individual scopes to be requested one-by-one. Therefore a policy change was introduced; changes to the standard Invantive client scopes can only be handled against a surcharge. Please contact sales@invantive.com for pricing. As an alternative, you might want to reach out to Loket and acquire a client ID.