Answers.Body: <p>The required permissions are specified in the FormBuilder config.  Your screenshot shows &quot;Permission: CiviCRM access CiviCRM backend API&quot;.</p>
  <p>Change that to be something more suitable for this form's usage.</p>
  
Answers.ContentLicense: CC BY-SA 4.0
Answers.CreationDate: 2023-01-06T10:18:42.327Z
Answers.LastActivityDate: 2023-01-06T10:18:42.327Z
Answers.UserDisplayName: Aidan
Answers.Body: <p>If you want the form to be accessible to anonymous users then you need to select &quot;Allow All Users (Including Anonymous)&quot; from the &quot;Permissions&quot; dropdown.</p>
  
Answers.ContentLicense: CC BY-SA 4.0
Answers.CreationDate: 2024-01-17T03:13:47.067Z
Answers.LastActivityDate: 2024-01-17T03:13:47.067Z
Answers.UserDisplayName: Coleman
Answers.Body: <p>I have the same situation as you.
  After doing some testing, I found a working solution : set the form permission as &quot;generic / allow all users (including anonymous)&quot;
  Screenshot in French below.</p>
  <p>What I don't know is how secure that is. I feel it is more ok than giving wide permissions at CMS level.</p>
  <p>Feedbacks welcome, I am experimenting ;)</p>
  <p><a href="https://i.sstatic.net/vsjwC.png" rel="nofollow noreferrer"><img src="https://i.sstatic.net/vsjwC.png" alt="enter image description here" /></a></p>
  
Answers.ContentLicense: CC BY-SA 4.0
Answers.CreationDate: 2023-07-11T19:53:01.457Z
Answers.LastActivityDate: 2023-07-11T19:53:01.457Z
Answers.UserDisplayName: stackexchange user
Answers.Body: <p>It turns out that anonymous also needs the permission CiviCRM: access CiviCRM backend and API (described as &quot;Master control for access to the main CiviCRM backend and API. Give to trusted roles only.&quot;)</p>
  <p>Perhaps there is a more secure way to achieve the same outcome?</p>
  
Answers.ContentLicense: CC BY-SA 4.0
Answers.CreationDate: 2022-12-31T16:07:09.617Z
Answers.LastActivityDate: 2022-12-31T16:07:09.617Z
Answers.UserDisplayName: gillenpj
Answers.Body: <p>One way of achieving this is to set the permission property in the *.aff.json to be an empty array, e.g.</p>
  <pre><code>{
    &quot;title&quot;: &quot;About you&quot;,
    &quot;server_route&quot;: &quot;civicrm/about-you&quot;,
    &quot;is_public&quot;: true,
    &quot;permission&quot;: []
  }
  </code></pre>
  <p>It doesn't look like there is an easy way in the GUI to clear the permissions and I am not sure whether this is recommended practice (I couldn't find it documented), but it does work.</p>
  
Answers.ContentLicense: CC BY-SA 4.0
Answers.CreationDate: 2023-06-09T03:52:08.080Z
Answers.Text: Having same issue - where do I find *.aff.json please
Answers.UserDisplayName: LesleyJill
Answers.ContentLicense: CC BY-SA 4.0
Answers.CreationDate: 2023-03-15T18:22:17.037Z
Answers.LastActivityDate: 2023-03-15T18:22:17.037Z
Answers.UserDisplayName: michaelmcandrew
Body: <p>I'm stumped trying to get Form Builder forms accessible to anonymous users. I've pared back one of the forms to its essentials: it only displays a text box. This works fine when I'm logged into the WordPress site on which CiviCRM is running, but if I access from another Microsoft Edge profile I get the following message: &quot;Sorry, due to an error, we are unable to fulfill your request at the moment. You may want to contact your administrator or service provider with more details about what action you were performing when this occurred. You do not have permission to access this page.&quot; I've included two screenshots below: the first shows the bare bones of the test form and the second shows the error message with debugging/logging turned on. <strong>Any pointers to what I might check would be greatly appreciated.</strong></p>
  <p>These is the list of current permissions turned on for anonymous users:</p>
  <ul>
  <li>CiviCRM: access uploaded files</li>
  <li>CiviCRM: profile create</li>
  <li>CiviCRM: profile edit</li>
  <li>CiviCRM: profile view</li>
  <li>CiviCRM: access all custom data</li>
  <li>CiviCRM: view my invoices</li>
  <li>CiviEvent: register for events</li>
  <li>CiviEvent: view event info</li>
  <li>CiviContribute: make online contributions</li>
  <li>CiviMail: access CiviMail subscribe/unsubscribe pages</li>
  <li>CiviMail: view public CiviMail content</li>
  <li>CiviCampaign: sign CiviCRM Petition</li>
  </ul>
  <p><a href="https://i.sstatic.net/xa3Tb.png" rel="nofollow noreferrer"><img src="https://i.sstatic.net/xa3Tb.png" alt="enter image description here" /></a></p>
  <p><a href="https://i.sstatic.net/9kE13.png" rel="nofollow noreferrer"><img src="https://i.sstatic.net/9kE13.png" alt="enter image description here" /></a></p>
  
Tags: <permissions><formbuilder>
Title: Cannot access Form Builder forms as anonymous user
ThreadText: # Cannot access Form Builder forms as anonymous user
  
  (Asked by: username_0 on 2022-12-31)
  
  I'm stumped trying to get Form Builder forms accessible to anonymous users. I've pared back one of the forms to its essentials: it only displays a text box. This works fine when I'm logged into the WordPress site on which CiviCRM is running, but if I access from another Microsoft Edge profile I get the following message: "Sorry, due to an error, we are unable to fulfill your request at the moment. You may want to contact your administrator or service provider with more details about what action you were performing when this occurred. You do not have permission to access this page." I've included two screenshots below: the first shows the bare bones of the test form and the second shows the error message with debugging/logging turned on. **Any pointers to what I might check would be greatly appreciated.**
  
  These is the list of current permissions turned on for anonymous users:
  
  * CiviCRM: access uploaded files
  * CiviCRM: profile create
  * CiviCRM: profile edit
  * CiviCRM: profile view
  * CiviCRM: access all custom data
  * CiviCRM: view my invoices
  * CiviEvent: register for events
  * CiviEvent: view event info
  * CiviContribute: make online contributions
  * CiviMail: access CiviMail subscribe/unsubscribe pages
  * CiviMail: view public CiviMail content
  * CiviCampaign: sign CiviCRM Petition
  
  [![enter image description here](https://i.sstatic.net/xa3Tb.png)](https://i.sstatic.net/xa3Tb.png)
  
  [![enter image description here](https://i.sstatic.net/9kE13.png)](https://i.sstatic.net/9kE13.png)
  
  **Tags:** permissions, formbuilder
  
  
  ---
  
  ## 5 answers
  
  ### Answer by username_1 on 2023-01-06. Score: 3
  
  The required permissions are specified in the FormBuilder config. Your screenshot shows "Permission: CiviCRM access CiviCRM backend API".
  
  Change that to be something more suitable for this form's usage.
  
  
  ---
  
  ### Answer by username_2 on 2024-01-17. Score: 1
  
  If you want the form to be accessible to anonymous users then you need to select "Allow All Users (Including Anonymous)" from the "Permissions" dropdown.
  
  
  ---
  
  ### Answer by username_3 on 2023-07-11. Score: 0
  
  I have the same situation as you.
  After doing some testing, I found a working solution : set the form permission as "generic / allow all users (including anonymous)"
  Screenshot in French below.
  
  What I don't know is how secure that is. I feel it is more ok than giving wide permissions at CMS level.
  
  Feedbacks welcome, I am experimenting ;)
  
  [![enter image description here](https://i.sstatic.net/vsjwC.png)](https://i.sstatic.net/vsjwC.png)
  
  
  ---
  
  ### Answer by username_0 on 2022-12-31. Score: 0
  
  It turns out that anonymous also needs the permission CiviCRM: access CiviCRM backend and API (described as "Master control for access to the main CiviCRM backend and API. Give to trusted roles only.")
  
  Perhaps there is a more secure way to achieve the same outcome?
  
  
  ---
  
  ### Answer by username_4 on 2023-03-15. Score: 0
  
  One way of achieving this is to set the permission property in the *.aff.json to be an empty array, e.g.
  {
    "title": "About you",
    "server_route": "civicrm/about-you",
    "is_public": true,
    "permission": []
  }
  
  It doesn't look like there is an easy way in the GUI to clear the permissions and I am not sure whether this is recommended practice (I couldn't find it documented), but it does work.
  
  > **Comments:**
  > **username_5**: Having same issue - where do I find *.aff.json please  
  
  ---
  
  