Can create cards but can't update their custom field (unauthorized card permission requested)
Asked by pei_iborra_gmail_com:

Hello.

I'm developing a integration between TRELLO and our RDP via REST API.

Accordig to your documentation, I use a POST message to create a card in a specific List in our board.

Then I need to update a value in one of ours custom fields, for the same card. Then i send a PUT message indicating the card, the custom field and the value, but I get the result "unauthorized card permission requested"

The Api id and the token are same in both messages. And i think I have full permissions.

Testing I use Postman. Please see attached screenshots

Please can you help me?![Captura de pantalla 2024-05-29 092235.png](https://community.atlassian.com/t5/image/serverpage/image-id/326734i643260BDA6934AE6/image-size/large?v=v2&px=999 "Captura de pantalla 2024-05-29 092235.png")

![Captura de pantalla 2024-05-29 092300.png](https://community.atlassian.com/t5/image/serverpage/image-id/326534i132C8D92904C33B0/image-size/large?v=v2&px=999 "Captura de pantalla 2024-05-29 092300.png")


Answers:
author: Brittany Joiner
body: [@pei_iborra_gmail_com](/t5/user/viewprofilepage/user-id/5508112)   
1) you might want to blur out the key and token in these screenshots

2) i tried this and it worked for me - i would make sure you have the right custom field id, because it was a little confusing for me at first to figure out what that was:   
![image.png](https://community.atlassian.com/t5/image/serverpage/image-id/326716iE1826CC38DA01906/image-size/large?v=v2&px=999 "image.png")

If that doesn't work, you might wanna create a support ticket here and see if it's still throwing that error: <https://trello.com/contact>

comments: author: pei_iborra_gmail_com
body: Hello Brittany, many thanks for your answer

For the point 1) I did, thanks

For the point 2) I don't know exactly from where you got your image. I need to clarify my initial approach:

* a) I send a GET message **../boards/{id}/** **customFields** in order to know all the custom fields an their id.

* b) I send a POST message **../cards?idList={idList}\&key...\&token...** in order to create a new card.

* c) I send a PUT message**../cards/{idCard}/customField/{idCustomField}/item**and get 'unauthorized card permission requested'


author: pei_iborra_gmail_com
body: Brittany:

While I was clarifying my approach, I found the problem: In the PUT message sent there was neither the ApiKey nor the Token, although it was in the 'Params' tab of Postman.

Thank you su much and sorry for the nonsense.

![Captura de pantalla 2024-05-29 092300.png](https://community.atlassian.com/t5/image/serverpage/image-id/326742iE4A89522923400CA/image-size/large?v=v2&px=999 "Captura de pantalla 2024-05-29 092300.png")


author: Brittany Joiner
body: I was on a trello card and just added \`.json\` to the end of the url which shows you the available JSON.

So when you do A), are you using id or idModel?

![image.png](https://community.atlassian.com/t5/image/serverpage/image-id/326744i8B16001C21BD2347/image-size/large?v=v2&px=999 "image.png")

I would try using the opposite of whatever you're using. But it should just be the straight up \`id\`, which i assume you have been using.

If that's the case, then you may not actually have permissions. If you go to the Trello board and create a card and update the field, does it let you? Are you a member or admin of the board? (You should be able to just be a member and do this, but if you change it to admin does it work?)


author: Brittany Joiner
body: [@pei_iborra_gmail_com](/t5/user/viewprofilepage/user-id/5508112) ah just saw your answer lol. Love and hate when it's something simple like that. Good catch!


author: pei_iborra_gmail_com
body: Thank you very much for your useful help.

I love people like you


author: Brittany Joiner
body: [@pei_iborra_gmail_com](/t5/user/viewprofilepage/user-id/5508112) woohoo! happy to help! Feel free to accept this answer if it helped - that way folks who are looking for the same can see there is a solution in here!  


author: pei_iborra_gmail_com
body: Hello Brittany, is accepted many days ago.

Thank you so much


author: Brittany Joiner
body: [@pei_iborra_gmail_com](/t5/user/viewprofilepage/user-id/5508112) ah oops! not sure how i missed that! thanks for doing that!


Tags: custom-field