Hello there,
I have a website where members with a particular type of membership can create and delete users/members, the problem is, deleteMember has specific permissions that prevent this. When trying to do that, the method returns the following error:
"applicationError": {
"description": "Forbidden",
"code": "FORBIDDEN",
"data": {}
}
The method only works when called by an admin, and has no way to suppress the authentication or elevate it with wix-auth, the only workaround is to use the deprecated wixUsersBackend's APIs to delete the members.
Edit: The updateMember method also has the same permissions issue, please provide some way to bypass these permissions. We're aware of the security concerns, but please, let us decide.
I'd love to have a way to suppress the auth. of the method either by passing suppressions options or by elevating the permissions.
@Yisrael (Wix)
Do you need a way to suppress the auth.?
Yes
No
I'm not sure
Ahmad~!
have the same issue, can't delete member through code. How I can delete member? could someone explain?
Good catch!