Permissions required to download article attachments via API?

Infos:

  • Used Zammad version: 5.1.x (installed a few days ago, should be latest)
  • Used Zammad installation type: package
  • Operating system: ubuntu 20.04
  • Browser + version: API

Expected behavior:

  • Downloading article attachment works with admin.ticket or ticket.agent permissions

Actual behavior:

  • Zammad rejects the request
  • When I create an access token as a test that has all available permissions, downloading attachments works fine

Steps to reproduce the behavior:

  • Try to download attachments via API with access token that has above mentioned permissions

===============================

Hey Everyone,

I’d be very grateful if someone could confirm the actual required permissions to download article attachments via API.

Best Regards
Ralf

Looks like last release have problems with API, check my topic about dropdowns

Maybe some global problem with permissions?

Retreiving attachments via API requires the same permissions like viewing the ticket they belong to.
So basically ticket.agent permissions and access to the group in question.