Desire2Learn Permissions to Access Semesters Via API

Question

I am trying to use the Desire2Learn REST API to return semesters, but I'm getting a 403 Not Authorized error.

The request I am making is: GET /d2l/api/lp/1.1/outypes/semester

I am making this call while authenticated to the system as a student user.

This is a test environment, so I have full control of the student user's permission, but I haven't found which permission setting controls access to the semester org unit. Is it possible for someone with lower level permissions to make this call?

What permission would this user need to be able to make this call?

Thanks!

Answer 1

Student-type user roles are not typically given permission to make calls like this one.

The particular permission at play here is likely Org Unit Type Editor > Can Create and Edit Org Unit Types at the root organization level (you'll notice that the same behaviour is at play around the API call to retrieve the entire catalog of known org-unit types); however, you almost certainly do not want to grant this role permission to a student role: the role permissions for this tool bind together the ability to create and edit org unit types with the ability to see their definitions.