Receiving Forbidden 403 when calling /rest/api/3/customField/{field}/option
Asked by Tony Farah:

I receive a Forbidden 403 when trying to access the /rest/api/3/customField/{field}/option rest API service even though I am a JIRA Admin and I have Basic Authentication sent in my request.

The full message is:

\<html\>  
\<head\>  
\<meta content="HTML Tidy for Java (vers. 26 Sep 2004), see [www.w3.org](http://www.w3.org)" name="generator"/\>  
\<title\>Forbidden (403)\</title\>  
\<!--\[if IE\]\>\<!\[endif\]--\>  
\<script type="text/javascript"\>(function() {  
var contextPath = '';  
var eventBuffer = \[\];

function printDeprecatedMsg() {  
if (console \&amp;\&amp; console.warn) {  
console.warn('DEPRECATED JS - contextPath global variable has been deprecated since 7.4.0. Use \`wrm/context-path\` module instead.');  
}  
}

function sendEvent(analytics, postfix) {  
analytics.send({  
name: 'js.globals.contextPath.' + postfix  
});  
}

function sendDeprecatedEvent(postfix) {  
try {  
var analytics = require('jira/analytics');  
if (eventBuffer.length) {  
eventBuffer.forEach(function(value) {  
sendEvent(analytics, value);  
});  
eventBuffer = \[\];  
}

if (postfix) {  
sendEvent(analytics, postfix);  
}  
} catch(ex) {  
eventBuffer.push(postfix);  
setTimeout(sendDeprecatedEvent, 1000);  
}  
}

Object.defineProperty(window, 'contextPath', {  
get: function() {  
printDeprecatedMsg();  
sendDeprecatedEvent('get');  
return contextPath;  
},  
set: function(value) {  
printDeprecatedMsg();  
sendDeprecatedEvent('set');  
contextPath = value;  
}  
});  
})();\</script\>  
\<script type="text/javascript"\>window.WRM=window.WRM\|\|{};window.WRM._unparsedData=window.WRM._unparsedData\|\|{};window.WRM._unparsedErrors=window.WRM._unparsedErrors\|\|{};  
WRM._unparsedData\["com.atlassian.plugins.atlassian-plugins-webresource-plugin:context-path.context-path"\]="\\"\\"";  
WRM._unparsedData\["jira.core:feature-flags-data.feature-flag-data"\]="{\\"enabled-feature-keys\\":\[\\"com.atlassian.jira.agile.darkfeature.editable.detailsview\\",\\"nps.survey.inline.dialog\\",\\"com.atlassian.jira.agile.darkfeature.edit.closed.sprint.enabled\\",\\"jira.plugin.devstatus.phasetwo\\",\\"jira.frother.reporter.field\\",\\"atlassian.rest.xsrf.legacy.enabled\\",\\"jira.issue.status.lozenge\\",\\"com.atlassian.jira.config.BIG_PIPE\\",\\"com.atlassian.jira.projects.issuenavigator\\",\\"com.atlassian.jira.config.PDL\\",\\"jira.plugin.devstatus.phasetwo.enabled\\",\\"atlassian.aui.raphael.disabled\\",\\"app-switcher.new\\",\\"frother.assignee.field\\",\\"com.atlassian.jira.projects.ProjectCentricNavigation.Switch\\",\\"jira.onboarding.cyoa\\",\\"com.atlassian.jira.agile.darkfeature.kanplan.enabled\\",\\"com.atlassian.jira.config.ProjectConfig.MENU\\",\\"com.atlassian.jira.projects.sidebar.DEFER_RESOURCES\\",\\"com.atlassian.jira.agile.darkfeature.kanplan.epics.and.versions.enabled\\",\\"com.atlassian.jira.agile.darkfeature.sprint.goal.enabled\\",\\"jira.zdu.admin-updates-ui\\",\\"jira.zdu.jmx-monitoring\\",\\"multiselect.frother.renderer\\",\\"mail.batching.enabled\\",\\"sd.new.settings.sidebar.location.disabled\\",\\"jira.zdu.cluster-upgrade-state\\",\\"com.atlassian.jira.agile.darkfeature.splitissue\\",\\"com.atlassian.jira.config.CoreFeatures.LICENSE_ROLES_ENABLED\\",\\"jira.export.csv.enabled\\"\],\\"feature-flag-states\\":{\\"mail.batching.override.core\\":true,\\"com.atlassian.jira.issues.archiving.filters\\":false,\\"atlassian.cdn.static.assets\\":true,\\"com.atlassian.jira.issuetable.draggable\\":true,\\"mail.batching\\":false,\\"sd.users.and.roles.new.page\\":false,\\"com.atlassian.jira.diagnostics.perflog\\":true,\\"com.atlassian.jira.agile.darkfeature.kanban.hide.old.done.issues\\":true,\\"jira.jql.suggestrecentfields\\":false,\\"com.atlassian.jira.agile.darkfeature.backlog.showmore\\":true,\\"com.atlassian.jira.gdpr.rtbf\\":false,\\"com.atlassian.jira.security.xsrf.session.token\\":true,\\"jira.priorities.per.project.edit.default\\":false,\\"com.atlassian.jira.agile.darkfeature.optimistic.transitions\\":true,\\"com.atlassian.jira.issuetable.move.links.hidden\\":true,\\"jira.renderer.consider.variable.format\\":true,\\"com.atlassian.jira.user.dbIdBasedKeyGenerationStrategy\\":true,\\"com.atlassian.jira.agile.darkfeature.kanplan\\":false,\\"jira.priorities.per.project.jsd\\":true,\\"com.atlassian.jira.issues.archiving.browse\\":true,\\"jira.instrumentation.laas\\":false,\\"com.atlassian.jira.agile.darkfeature.rapid.boards.bands\\":true,\\"com.atlassian.jira.sharedEntityEditRights\\":true,\\"jira.customfields.paginated.ui\\":true,\\"com.atlassian.jira.agile.darkfeature.flexible.boards\\":true,\\"com.atlassian.jira.agile.darkfeature.edit.closed.sprint\\":false,\\"jira.create.linked.issue\\":true,\\"mail.batching.user.notification\\":true,\\"com.atlassian.jira.agile.darkfeature.sprint.goal\\":false,\\"jira.dc.lock.leasing\\":true,\\"com.atlassian.jira.agile.darkfeature.dataonpageload\\":true,\\"mail.batching.create.section.cf\\":true,\\"jira.sal.host.connect.accessor.existing.transaction.will.create.transactions\\":true,\\"com.atlassian.jira.custom.csv.escaper\\":true,\\"com.atlassian.jira.plugin.issuenavigator.filtersUxImprovment\\":true,\\"com.atlassian.jira.agile.darkfeature.kanplan.epics.and.versions\\":false,\\"external.links.new.window\\":true,\\"jira.quick.search\\":true,\\"jira.jql.smartautoselectfirst\\":false,\\"com.atlassian.jira.projects.per.project.permission.query\\":true,\\"com.atlassian.jira.issues.archiving\\":true,\\"index.use.snappy\\":true,\\"jira.priorities.per.project\\":true,\\"com.atlassian.jira.upgrade.startup.fix.index\\":false}}";  
WRM._unparsedData\["jira.core:default-comment-security-level-data.DefaultCommentSecurityLevelHelpLink"\]="{\\"extraClasses\\":\\"default-comment-level-help\\",\\"title\\":\\"Commenting on an Issue\\",\\"url\\":\\"[https://docs.atlassian.com/jira/jcore-docs-085/Editing+and+collaborating+on+issues#Editingandcollaboratingonissues-restrictacomment\\",\\"isLocal\\":false](https://docs.atlassian.com/jira/jcore-docs-085/Editing+and+collaborating+on+issues#Editingandcollaboratingonissues-restrictacomment\",\"isLocal\":false)}";  
WRM._unparsedData\["com.atlassian.analytics.analytics-client:policy-update-init.policy-update-data-provider"\]="false";  
WRM._unparsedData\["com.atlassian.analytics.analytics-client:programmatic-analytics-init.programmatic-analytics-data-provider"\]="false";  
WRM._unparsedData\["jira.core:dateFormatProvider.allFormats"\]="{\\"dateFormats\\":{\\"meridiem\\":\[\\"AM\\",\\"PM\\"\],\\"eras\\":\[\\"BC\\",\\"AD\\"\],\\"months\\":\[\\"January\\",\\"February\\",\\"March\\",\\"April\\",\\"May\\",\\"June\\",\\"July\\",\\"August\\",\\"September\\",\\"October\\",\\"November\\",\\"December\\"\],\\"monthsShort\\":\[\\"Jan\\",\\"Feb\\",\\"Mar\\",\\"Apr\\",\\"May\\",\\"Jun\\",\\"Jul\\",\\"Aug\\",\\"Sep\\",\\"Oct\\",\\"Nov\\",\\"Dec\\"\],\\"weekdaysShort\\":\[\\"Sun\\",\\"Mon\\",\\"Tue\\",\\"Wed\\",\\"Thu\\",\\"Fri\\",\\"Sat\\"\],\\"weekdays\\":\[\\"Sunday\\",\\"Monday\\",\\"Tuesday\\",\\"Wednesday\\",\\"Thursday\\",\\"Friday\\",\\"Saturday\\"\]},\\"lookAndFeelFormats\\":{\\"relativize\\":\\"true\\",\\"time\\":\\"h:mm a\\",\\"day\\":\\"EEEE h:mm a\\",\\"dmy\\":\\"dd/MMM/yy\\",\\"complete\\":\\"dd/MMM/yy h:mm a\\"}}";  
WRM._unparsedData\["jira.core:avatar-picker-data.data"\]="{}";  
WRM._unparsedData\["com.atlassian.jira.jira-header-plugin:dismissedFlags.flags"\]="{\\"dismissed\\":\[\]}";  
WRM._unparsedData\["com.atlassian.jira.jira-header-plugin:newsletter-signup-tip-init.newsletterSignup"\]="{\\"signupDescription\\":\\"Get updates, inspiration and best practices from the team behind Jira.\\",\\"formUrl\\":\\"[https://www.atlassian.com/apis/exact-target/{0}/subscribe?mailingListId=1401671\\",\\"signupTitle\\":\\"Sign](https://www.atlassian.com/apis/exact-target/{0}/subscribe?mailingListId=1401671\",\"signupTitle\":\"Sign) up!\\",\\"signupId\\":\\"newsletter-signup-tip\\",\\"showNewsletterTip\\":false}";  
WRM._unparsedData\["com.atlassian.jira.project-templates-plugin:project-templates-plugin-resources.ptAnalyticsData"\]="{\\"instanceCreatedDate\\":\\"2020-02-12\\"}";  
WRM._unparsedData\["jira.core:user-message-flags-data.adminLockout"\]="{}";  
WRM._unparsedData\["com.atlassian.plugins.helptips.jira-help-tips:help-tip-manager.JiraHelpTipData"\]="{\\"anonymous\\":true}";  
if(window.WRM._dataArrived)window.WRM._dataArrived();\</script\>  
\<link media="all" data-wrm-batch-type="context" data-wrm-key="_super" href="/s/a74df5f9b3527d2b4489df86a7047cdb-CDN/-efcqho/805003/6411e0087192541a09d88223fb51a6a0/e5dce8c22f35f6ae877a09c446155e80/_/download/contextbatch/css/_super/batch.css" rel="stylesheet" type="text/css"/\>  
\<link media="all" data-wrm-batch-type="context" data-wrm-key="atl.general,jira.global,jira.general,-_super" href="/s/2bb930ae37b059d47f40f9b5b60e4849-CDN/-efcqho/805003/6411e0087192541a09d88223fb51a6a0/f6faf983930c1524694fc8d6a542d8b3/_/download/contextbatch/css/atl.general,jira.global,jira.general,-_super/batch.css?agile_global_admin_condition=true\&amp;jag=true" rel="stylesheet" type="text/css"/\>  
\<link media="all" data-wrm-batch-type="resource" data-wrm-key="com.atlassian.auiplugin:split_aui.pattern.label" href="/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-efcqho/805003/6411e0087192541a09d88223fb51a6a0/8.5.0/_/download/batch/com.atlassian.auiplugin:split_aui.pattern.label/com.atlassian.auiplugin:split_aui.pattern.label.css" rel="stylesheet" type="text/css"/\>  
\<link media="all" data-wrm-batch-type="resource" data-wrm-key="jira.webresources:global-static-adgs" href="/s/5af083bd9a7e4fb9eb6c3205e1999ad9-CDN/-efcqho/805003/6411e0087192541a09d88223fb51a6a0/1.0/_/download/batch/jira.webresources:global-static-adgs/jira.webresources:global-static-adgs.css" rel="stylesheet" type="text/css"/\>  
\<link media="all" data-wrm-batch-type="resource" data-wrm-key="jira.webresources:global-static" href="/s/bda38bfcfb6b0ee821f024b94037dd10-CDN/-efcqho/805003/6411e0087192541a09d88223fb51a6a0/1.0/_/download/batch/jira.webresources:global-static/jira.webresources:global-static.css" rel="stylesheet" type="text/css"/\>  
\<script data-initially-rendered="data-initially-rendered" data-wrm-batch-type="context" data-wrm-key="_super" src="/s/2af12fe98a561841e510942053868caa-CDN/-efcqho/805003/6411e0087192541a09d88223fb51a6a0/e5dce8c22f35f6ae877a09c446155e80/_/download/contextbatch/js/_super/batch.js?locale=en-US" type="text/javascript"/\>  
\<script data-initially-rendered="data-initially-rendered" data-wrm-batch-type="context" data-wrm-key="atl.general,jira.global,jira.general,-_super" src="/s/a6305b6fb6d8c64022295826085bdb82-CDN/-efcqho/805003/6411e0087192541a09d88223fb51a6a0/f6faf983930c1524694fc8d6a542d8b3/_/download/contextbatch/js/atl.general,jira.global,jira.general,-_super/batch.js?agile_global_admin_condition=true\&amp;jag=true\&amp;locale=en-US" type="text/javascript"/\>  
\<script data-initially-rendered="data-initially-rendered" data-wrm-batch-type="context" data-wrm-key="atl.global,-_super" src="/s/91853a22a6e112eb49e0c1f45b59380b-CDN/-efcqho/805003/6411e0087192541a09d88223fb51a6a0/2bb539d4cc0a1e2fb4ffe58f91375575/_/download/contextbatch/js/atl.global,-_super/batch.js?locale=en-US" type="text/javascript"/\>  
\<script data-initially-rendered="data-initially-rendered" data-wrm-batch-type="resource" data-wrm-key="com.atlassian.auiplugin:split_aui.pattern.label" src="/s/07ee7fa41b5632c9c2bc3df6e19168d5-CDN/-efcqho/805003/6411e0087192541a09d88223fb51a6a0/8.5.0/_/download/batch/com.atlassian.auiplugin:split_aui.pattern.label/com.atlassian.auiplugin:split_aui.pattern.label.js?locale=en-US" type="text/javascript"/\>  
\<link media="all" data-wrm-batch-type="context" data-wrm-key="jira.global.look-and-feel,-_super" href="/s/da5b2492af2e2dba763d7f29a2cedbf0-CDN/-efcqho/805003/6411e0087192541a09d88223fb51a6a0/1a5a1931ff8c558b9b138b6ac226bb33/_/download/contextbatch/css/jira.global.look-and-feel,-_super/batch.css" rel="stylesheet" type="text/css"/\>  
\<script src="/rest/api/1.0/shortcuts/805003/bdc252c50755a10a5a9e8b3cc1e786dc/shortcuts.js" type="text/javascript"/\>  
\<meta data-version="8.5.3" data-name="jira" content="JIRA" name="application-name"/\>  
\</head\>  
\<body data-version="8.5.3" class="aui-layout aui-style-default page-type-message" id="jira"\>  
\<div class="aui-page-panel"\>  
\<div class="aui-page-panel-inner"\>  
\<div class="aui-page-header-inner"\>  
\<div class="aui-page-header-main"\>  
\<h1\>Forbidden (403)\</h1\>  
\</div\>  
\<!--.aui-page-header-main--\>  
\</div\>  
\<!--.aui-page-header-inner--\>  
\<!--.aui-page-header--\>  
\<div class="aui-message aui-message-warning warning"\>  
\<p\>  
Encountered a  
\<code\>"403 - Forbidden"\</code\>  
error while loading this page.  
\</p\>  
\<p\>  
\<a href="/secure/MyJiraHome.jspa"\>Go to Jira home\</a\>  
\</p\>  
\</div\>  
\<!--.aui-page-panel-content--\>  
\</div\>  
\<!--.aui-page-panel-inner--\>  
\</div\>  
\<!--.aui-page-panel--\>  
\</body\>  
\</html\>


Answers:
author: wwalser
body: \> I receive a Forbidden 403 when trying to access the /rest/api/3/customField/{field}/option rest API service even though I am a JIRA Admin and I have Basic Authentication sent in my request.

A few things to help clarify the question:

I see a version number, 8.5.3, in the above content so I presume this is Jira server?

What is doing this request, Jira Automation?

May I see the configuration of whatever is doing said request?

comments: author: wwalser
body: In the meantime, this help article may provide some helpful pointers: <https://confluence.atlassian.com/stashkb/unable-to-connect-to-jira-for-authentication-forbidden-403-323391874.html>

Also, you may want to check to see if you can do the same request via curl. That is often illuminating.


Tags: api