I’m trying to build a website with Kirby CMS and a decoupled front-end, e.g. static generated site with Eleventy.
I’ve setup a user role called “visitor” with the permissions as described in the documentation, by deactivating panel access.
Yet, this doesn’t seem to work the way I expect it as described in the documentation. For example, trying to request a page “http://localhost:3002/api/pages/home” via basic authentication returns an error:
{
"status": "error",
"message": "You are not allowed to access the panel",
"code": 403,
"key": "error.access.panel",
"details": []
}
Full role configuration:
title: Visitor
permissions:
access:
panel: false
site: true
pages:
*: false
read: true
But when I set the permission for the panel to true, the request works. This either seems like a bug to me, or the documentation is confusing, at least I can’t wrap my head around accessing the content via the API with the panel set to false.