Answers.Body: <p>Checking permissions is important if you want the API to respect the access rights you have given to users? If in your setting and requirement it is not important that you can protect the country and state data you could skip the permission check. Are you using the API on the same server or with REST?</p>
  
Answers.ContentLicense: CC BY-SA 3.0
Answers.CreationDate: 2016-07-18T17:09:30.753Z
Answers.Text: Yes we are using REST. There is no reason to protect country and state data, but I can't get the REST API to work when permissions=0.
Answers.UserDisplayName: Nina Gonzalez
Answers.ContentLicense: CC BY-SA 3.0
Answers.CreationDate: 2016-07-18T17:30:40.930Z
Answers.Text: Did you check the wiki https://wiki.civicrm.org/confluence/display/CRMDOC/REST+interface? If so, does the user have the required AJAX API permission?
Answers.UserDisplayName: ErikH - CiviCooP
Answers.ContentLicense: CC BY-SA 3.0
Answers.CreationDate: 2016-07-18T21:26:26.577Z
Answers.Text: OK, I will create a user key and a site key.  Thanks for your help.
Answers.UserDisplayName: Nina Gonzalez
Answers.ContentLicense: CC BY-SA 3.0
Answers.CreationDate: 2016-07-15T06:49:04.453Z
Answers.LastActivityDate: 2016-07-15T06:49:04.453Z
Answers.UserDisplayName: ErikH - CiviCooP
Body: <p>I'm using civicrm's API to pull country and state data from CiviCRM into a Gravity Forms address pull-down list.  The current webhooks between Gravity Forms and CiviCRM are failing because Gravity Forms uses a text box for state field, which is unstructured and does not match CiviCRM data.</p>
  
  <p>I see setup for the api gives the option to either check permission or not.  Any reason to check permissions for data for public access? </p>
  
Tags: <api><permissions><security>
Title: Setting up API access for WordPress installation
ThreadText: # Setting up API access for WordPress installation
  
  (Asked by: username_0 on 2016-07-14)
  
  I'm using civicrm's API to pull country and state data from CiviCRM into a Gravity Forms address pull-down list. The current webhooks between Gravity Forms and CiviCRM are failing because Gravity Forms uses a text box for state field, which is unstructured and does not match CiviCRM data.
  
  I see setup for the api gives the option to either check permission or not. Any reason to check permissions for data for public access?
  
  **Tags:** api, permissions, security
  
  
  ---
  
  ## 1 answers
  
  ### Answer by username_1 on 2016-07-15. Score: 1
  
  Checking permissions is important if you want the API to respect the access rights you have given to users? If in your setting and requirement it is not important that you can protect the country and state data you could skip the permission check. Are you using the API on the same server or with REST?
  
  > **Comments:**
  > **username_0**: Yes we are using REST. There is no reason to protect country and state data, but I can't get the REST API to work when permissions=0.  
  > **username_1**: Did you check the wiki https://wiki.civicrm.org/confluence/display/CRMDOC/REST+interface? If so, does the user have the required AJAX API permission?  
  > **username_0**: OK, I will create a user key and a site key.  Thanks for your help.  
  
  ---
  
  