# Can't get guest users to work \[error :403\]

**URL:** <https://community.dreamfactory.com/t/cant-get-guest-users-to-work-error-403/218>\
**Category:** Authentication & Security\
**Created:** [July 29, 2014, 1:06pm UTC](https://community.dreamfactory.com/t/cant-get-guest-users-to-work-error-403/218 "2014-07-29T13:06:29Z")\
**Posts on this page:** 12\
**Page:** 1

<div class="post-metadata">

**Author:** ![Objective\_neo](https://yyz1.discourse-cdn.com/flex035/user_avatar/community.dreamfactory.com/objective_neo/32/79_2.png) [@Objective\_neo](https://community.dreamfactory.com/u/Objective_neo)\
**Post date:** [July 29, 2014, 1:06pm UTC](https://community.dreamfactory.com/t/cant-get-guest-users-to-work-error-403/218/1 "2014-07-29T13:06:30Z")

</div>

I want to enable access to some parts of my App API without any kind of user authentication.

I created a new read only role from the console then in the admin console I allowed guest users access

I keep getting that error

> {“error”:[{“context”:null,“message”:“Access to application ‘example-application’ is not provisioned for this user’s role.”,“code”:403}]}

Am I missing something or I have to use authentication even for guest users?

---

<div class="post-metadata">

**Author:** ![Jason](https://yyz1.discourse-cdn.com/flex035/user_avatar/community.dreamfactory.com/jason/32/1194_2.png) [@Jason](https://community.dreamfactory.com/u/Jason)\
**Post date:** [July 29, 2014, 2:27pm UTC](https://community.dreamfactory.com/t/cant-get-guest-users-to-work-error-403/218/2 "2014-07-29T14:27:29Z")

</div>

In the role you created for guest users, check the box next to “example-application” and make sure the services you want access to are in the service access list below.

---

<div class="post-metadata">

**Author:** ![Objective\_neo](https://yyz1.discourse-cdn.com/flex035/user_avatar/community.dreamfactory.com/objective_neo/32/79_2.png) [@Objective\_neo](https://community.dreamfactory.com/u/Objective_neo)\
**Post date:** [July 29, 2014, 2:34pm UTC](https://community.dreamfactory.com/t/cant-get-guest-users-to-work-error-403/218/3 "2014-07-29T14:34:26Z")

</div>

I did that. I can only query rest/db but if i specify the table i keep getting that error.

---

<div class="post-metadata">

**Author:** ![benbusse](https://yyz1.discourse-cdn.com/flex035/user_avatar/community.dreamfactory.com/benbusse/32/4_2.png) [@benbusse](https://community.dreamfactory.com/u/benbusse)\
**Post date:** [July 29, 2014, 6:18pm UTC](https://community.dreamfactory.com/t/cant-get-guest-users-to-work-error-403/218/4 "2014-07-29T18:18:41Z")

</div>

Did you figure it out? Make sure you grant correct CRUD permissions to the specific table for that role (or set database service access to \* for test development). If you’re still having issues, contact [support@dreamfactory.com](mailto:support@dreamfactory.com) and we’ll troubleshoot it with you.

---

<div class="post-metadata">

**Author:** ![Mark](https://yyz1.discourse-cdn.com/flex035/user_avatar/community.dreamfactory.com/mark/32/69_2.png) [@Mark](https://community.dreamfactory.com/u/Mark)\
**Post date:** [July 29, 2014, 6:30pm UTC](https://community.dreamfactory.com/t/cant-get-guest-users-to-work-error-403/218/5 "2014-07-29T18:30:10Z")

</div>

He contacted me on the support line and was able to solve his own issue - we think that it was related to the “-” in his application name, so he potentially found a issue during the process.

---

<div class="post-metadata">

**Author:** ![hjais](https://avatars.discourse-cdn.com/v4/letter/h/bbe5ce/32.png) [@hjais](https://community.dreamfactory.com/u/hjais)\
**Post date:** [September 29, 2014, 10:40am UTC](https://community.dreamfactory.com/t/cant-get-guest-users-to-work-error-403/218/6 "2014-09-29T10:40:25Z")

</div>

Hi, we are facing this same error. Getting 403 error for users but not admin. CORS access set to \* and guest users is disabled. Would really appreciate help. Thanks.

Users are able to login but when we do a get, we get the error

{  
“error”: [  
{  
“context”: null,  
“message”: “Access to application ‘admin’ is not provisioned for this user’s role.”,  
“code”: 403  
}  
]  
}

The role has been correctly set. Please help.

---

<div class="post-metadata">

**Author:** ![hjais](https://avatars.discourse-cdn.com/v4/letter/h/bbe5ce/32.png) [@hjais](https://community.dreamfactory.com/u/hjais)\
**Post date:** [September 29, 2014, 12:09pm UTC](https://community.dreamfactory.com/t/cant-get-guest-users-to-work-error-403/218/7 "2014-09-29T12:09:13Z")

</div>

Solved. It seems it wont work using the swagger link but works fine using curl and takes a couple of minutes to implement the modifications. Thanks.

---

<div class="post-metadata">

**Author:** ![Mark](https://yyz1.discourse-cdn.com/flex035/user_avatar/community.dreamfactory.com/mark/32/69_2.png) [@Mark](https://community.dreamfactory.com/u/Mark)\
**Post date:** [September 29, 2014, 12:15pm UTC](https://community.dreamfactory.com/t/cant-get-guest-users-to-work-error-403/218/8 "2014-09-29T12:15:05Z")

</div>

Hi,

This is not a CORS issue but a permissions error. You must configure the role within the admin console to have access to this application. As it is, the app that you’re requesting access to is an admin app. Therefore you must grant user access to the admin app within your admin console.

Again, you can do this through the admin console - roles tab. Go into specific user’s role and grant them privileges to access the admin app. They can then access your admin app. This does not give the admin console (ui) for the user, which sounds like what you’re aiming for.

Thanks,

- Mark

---

<div class="post-metadata">

**Author:** ![Val](https://avatars.discourse-cdn.com/v4/letter/v/e56c9b/32.png) [@Val](https://community.dreamfactory.com/u/Val)\
**Post date:** [October 22, 2015, 6:04pm UTC](https://community.dreamfactory.com/t/cant-get-guest-users-to-work-error-403/218/9 "2015-10-22T18:04:23Z")

</div>

Having similar issue with 1.7.8 version. When trying to access a Remote SQL service called PlatformMasterDEV with a guest user, I am getting “Access to application ‘PlatformMasterDEV’ is not provisioned for this user’s role.”. I have enabled Guest users, Selected a valid Role that was setup with access to all methods enabled for the service. Please help. Having similar issue (same error) when trying to authenticate with a user that is not a SysAdmin by providing a valid session token id. The only way I was able to get it working was with authentication as a SysAdmin user.

---

<div class="post-metadata">

**Author:** ![jeffreystables](https://yyz1.discourse-cdn.com/flex035/user_avatar/community.dreamfactory.com/jeffreystables/32/173_2.png) [@jeffreystables](https://community.dreamfactory.com/u/jeffreystables)\
**Post date:** [October 22, 2015, 6:17pm UTC](https://community.dreamfactory.com/t/cant-get-guest-users-to-work-error-403/218/10 "2015-10-22T18:17:45Z")

</div>

We are not returning to 1.7.8 to resolve issues at this time. If this is not a result of your configuration, then it may indeed be a bug that was resolved in the 1.x product long after version 1.7.8 was released in September 2014. The last 1.x version was 1.9.4, released in June 2015. The current version is 2.0.

---

<div class="post-metadata">

**Author:** ![Val](https://avatars.discourse-cdn.com/v4/letter/v/e56c9b/32.png) [@Val](https://community.dreamfactory.com/u/Val)\
**Post date:** [October 23, 2015, 3:06am UTC](https://community.dreamfactory.com/t/cant-get-guest-users-to-work-error-403/218/11 "2015-10-23T03:06:49Z")

</div>

Thanks for the quick reply. I have installed v.1.9.4 and still having the same issue. Guest access is not working for Remote DB service. User based access to the same service works only when the user is a system admin. Any help would be appreciated.

---

<div class="post-metadata">

**Author:** ![jeffreystables](https://yyz1.discourse-cdn.com/flex035/user_avatar/community.dreamfactory.com/jeffreystables/32/173_2.png) [@jeffreystables](https://community.dreamfactory.com/u/jeffreystables)\
**Post date:** [October 28, 2015, 6:11pm UTC](https://community.dreamfactory.com/t/cant-get-guest-users-to-work-error-403/218/12 "2015-10-28T18:11:08Z")

</div>

Have you checked out [this post](https://community.dreamfactory.com/t/guest-users-authentication/1121/3?u=jeffreystables) that covers, from start to finish, making a service available to the guest role in 1.9.4? Make sure you’ve completed each step.
