# Fine tuning non-admin access to api\_docs

**URL:** <https://community.dreamfactory.com/t/fine-tuning-non-admin-access-to-api-docs/3593>\
**Category:** Users & Roles\
**Created:** [January 19, 2017, 7:20pm UTC](https://community.dreamfactory.com/t/fine-tuning-non-admin-access-to-api-docs/3593 "2017-01-19T19:20:36Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![Elvis\_Fernandes](https://yyz1.discourse-cdn.com/flex035/user_avatar/community.dreamfactory.com/elvis_fernandes/32/429_2.png) [@Elvis\_Fernandes](https://community.dreamfactory.com/u/Elvis_Fernandes)\
**Post date:** [January 19, 2017, 7:20pm UTC](https://community.dreamfactory.com/t/fine-tuning-non-admin-access-to-api-docs/3593/1 "2017-01-19T19:20:36Z")

</div>

I followed the instructions on this link ([https://blog.dreamfactory.com/share-api-docs-securely](https://blog.dreamfactory.com/share-api-docs-securely)) to allow access to non-admin users to the swagger docs, but the user see in the docs the wrong endpoints he have access to.

Example: I allowed the user’s role to access **api\_docs** , _gs/\_table/redir/ (GET)_\* and **gs/\_table/redir (POST)**, but in the swagger docs the user only see **gs/table/redir** (GET), which he is not supposed to have access to.

Is this a bug or do I need to do something else?

Some screenshots:

_Role config_

 ![](https://canada1.discourse-cdn.com/flex035/uploads/dreamfactory/original/1X/fb103267aab5bfdbc89be62483a56e648ad22804.png)

_User’s docs_

![](https://canada1.discourse-cdn.com/flex035/uploads/dreamfactory/original/1X/3388d2b454c62c92a060c155525a46d5d8005e17.png)

P.S.: I’m using DreamFactory 2.4.1.

---

<div class="post-metadata">

**Author:** ![Jedi](https://yyz1.discourse-cdn.com/flex035/user_avatar/community.dreamfactory.com/jedi/32/1058_2.png) [@Jedi](https://community.dreamfactory.com/u/Jedi)\
**Post date:** [January 26, 2017, 1:56pm UTC](https://community.dreamfactory.com/t/fine-tuning-non-admin-access-to-api-docs/3593/2 "2017-01-26T13:56:12Z")

</div>

I see the same behavior. Can someone from the DF team weigh in?

---

<div class="post-metadata">

**Author:** ![Elvis\_Fernandes](https://yyz1.discourse-cdn.com/flex035/user_avatar/community.dreamfactory.com/elvis_fernandes/32/429_2.png) [@Elvis\_Fernandes](https://community.dreamfactory.com/u/Elvis_Fernandes)\
**Post date:** [January 26, 2017, 2:30pm UTC](https://community.dreamfactory.com/t/fine-tuning-non-admin-access-to-api-docs/3593/3 "2017-01-26T14:30:56Z")

</div>

@formerstaff @DFCommunityManager Any thoughts on this?

---

<div class="post-metadata">

**Author:** ![formerstaff](https://yyz1.discourse-cdn.com/flex035/user_avatar/community.dreamfactory.com/formerstaff/32/1133_2.png) [@formerstaff](https://community.dreamfactory.com/u/formerstaff)\
**Post date:** [February 6, 2017, 4:22pm UTC](https://community.dreamfactory.com/t/fine-tuning-non-admin-access-to-api-docs/3593/4 "2017-02-06T16:22:54Z")

</div>

Confirmed this is not behaving as it should. Filing a bug/feature request.  
For now, you will need to grant access to the whole service for it to be visible in API Docs. Sorry.

---

<div class="post-metadata">

**Author:** ![formerstaff](https://yyz1.discourse-cdn.com/flex035/user_avatar/community.dreamfactory.com/formerstaff/32/1133_2.png) [@formerstaff](https://community.dreamfactory.com/u/formerstaff)\
**Post date:** [February 6, 2017, 4:28pm UTC](https://community.dreamfactory.com/t/fine-tuning-non-admin-access-to-api-docs/3593/5 "2017-02-06T16:28:35Z")

</div>

for reference this is DF-1005

---

<div class="post-metadata">

**Author:** ![teksuser](https://avatars.discourse-cdn.com/v4/letter/t/4da419/32.png) [@teksuser](https://community.dreamfactory.com/u/teksuser)\
**Post date:** [September 4, 2017, 10:51am UTC](https://community.dreamfactory.com/t/fine-tuning-non-admin-access-to-api-docs/3593/6 "2017-09-04T10:51:25Z")

</div>

> [@formerstaff](#):
>
> Confirmed this is not behaving as it should. Filing a bug/feature request.  
> For now, you will need to grant access to the whole service for it to be visible in API Docs. Sorry.

Is this error fixed now? If not please let me know which source code files we need to check to fix this error.

---

<div class="post-metadata">

**Author:** ![formerstaff](https://yyz1.discourse-cdn.com/flex035/user_avatar/community.dreamfactory.com/formerstaff/32/1133_2.png) [@formerstaff](https://community.dreamfactory.com/u/formerstaff)\
**Post date:** [September 5, 2017, 2:30pm UTC](https://community.dreamfactory.com/t/fine-tuning-non-admin-access-to-api-docs/3593/7 "2017-09-05T14:30:01Z")

</div>

This is fixed, as well as some additional features to API Docs that got pushed in version 2.8.1.  
Please update and enjoy.