unable to create PersonWantsOrg via RESTApi

Question

We try a Post request to the PersonWantsOrg table with the following example body: { "values": { "UID_Org": " 5c490797-b3ae-47c5-b2da-f1bc0e9ab675", "UID_PersonInserted":"8e93db71-7dc8-4f7f-bb2e-66c1951e85a3", "UID_PersonOrdered": "8e93db71-7dc8-4f7f-bb2e-66c1951e85a3", "OrderReason":"Test request via api" } } but receive the following error: 
 { "responseStatus":{ "message":"This employee Fellers Joshua (JOSHUA.FELLERS) is not authorized to make requests at this point."}, "errorString":"This employee Fellers Joshua (JOSHUA.FELLERS) is not authorized to make requests at this point.", "exceptions":[{"number":2133173,"message":"This employee Fellers Joshua (JOSHUA.FELLERS) is not authorized to make requests at this point."}] } } 
 We verified the same request can be made by the user in ITShop. and the person logged into the API has a System user of viAdmin assigned to it.

Markus Weiss-Ehlers · Answer

I strongly believe that you are not allowed to insert the request on behalf of others as the person using the viadmin user. You can verify this by trying to insert an entry into PersonWantsOrg in the ObjectBrowser using the same authenticator settings as for your ReST calls. I believe it will fail as well. 
 If so, then your system user needs to have the flag IsServiceAccount set. And no, you cannot set the flag for viadmin.

Markus Weiss-Ehlers · Answer

Just as an addition. 
 I re-created your sample in my 8.0.1 and 7.1.3 test environments and was able to insert a new request for myself (means for the logged in user) over the REST API without any special permissions and without any error. 
 Thing is, as I have said before, you will get the error message from your initial thread entry if the same product is already assigned for the recipient or if another approval process for the same product has already been started.

Markus Weiss-Ehlers · Answer

You are requesting an assignment resource but do not fill the property ObjectkeyAssignment of the PersonWantsOrg entry. If this request should become a business role membership, you need to fill the ObjectkeyAssignment with the XObjectKey of the PersonInOrg entry that is requested. 
 I suggest you take a look at the template of ShoppingCartItem.ObjectKeyAssignment that creates such a XObjectKey if you request the role membership via the ShoppingCart instead of entering all the data directly into PersonWantsOrg . This is what the Web Portal does.

Endpoint Privilege Management

unable to create PersonWantsOrg via RESTApi