{"action":"closed","issue":{"url":"https://api.github.com/repos/hashicorp/consul/issues/1947","repository_url":"https://api.github.com/repos/hashicorp/consul","labels_url":"https://api.github.com/repos/hashicorp/consul/issues/1947/labels{/name}","comments_url":"https://api.github.com/repos/hashicorp/consul/issues/1947/comments","events_url":"https://api.github.com/repos/hashicorp/consul/issues/1947/events","html_url":"https://github.com/hashicorp/consul/issues/1947","id":147816125,"number":1947,"title":"HTTP error code from Consul: 403 Forbidden","user":{"login":"akamalov","id":7885257,"avatar_url":"https://avatars.githubusercontent.com/u/7885257?v=3","gravatar_id":"","url":"https://api.github.com/users/akamalov","html_url":"https://github.com/akamalov","followers_url":"https://api.github.com/users/akamalov/followers","following_url":"https://api.github.com/users/akamalov/following{/other_user}","gists_url":"https://api.github.com/users/akamalov/gists{/gist_id}","starred_url":"https://api.github.com/users/akamalov/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/akamalov/subscriptions","organizations_url":"https://api.github.com/users/akamalov/orgs","repos_url":"https://api.github.com/users/akamalov/repos","events_url":"https://api.github.com/users/akamalov/events{/privacy}","received_events_url":"https://api.github.com/users/akamalov/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2016-04-12T17:11:48Z","updated_at":"2016-04-13T05:30:05Z","closed_at":"2016-04-13T05:30:05Z","body":"Greetings fellows. Still strugging trying to grant user 'anonymous' access rights so I can bring up Consul UI:\r\n\r\n**Environment**\r\n\r\n```\r\nConsul: 0.6.4\r\nUI: 0.64\r\n```\r\n**server.json**\r\n```\r\n{\r\n        \"server\": true,\r\n        \"datacenter\": \"dc1\",\r\n        \"data_dir\": \"/var/consul\",\r\n        \"encrypt\": \"8Zvue4a8jT+7hTuuyxMQyw==\",\r\n        \"log_level\": \"INFO\",\r\n        \"enable_syslog\": false,\r\n        \"disable_remote_exec\": true,\r\n        \"skip_leave_on_interrupt\": true,\r\n        \"ui_dir\": \"/consul/ui\",\r\n        \"ui\": true,\r\n        \"client_addr\": \"0.0.0.0\",\r\n        \"domain\": \"consul\",\r\n        \"verify_incoming\": false,\r\n        \"verify_outgoing\": false,\r\n        \"dns_config\": {\r\n                \"allow_stale\": true,\r\n                \"node_ttl\": \"30s\",\r\n                \"enable_truncate\": true,\r\n                \"only_passing\": true\r\n        },\r\n        \"leave_on_terminate\": true,\r\n        \"rejoin_after_leave\": true,\r\n        \"acl_datacenter\": \"dc1\",\r\n        \"acl_default_policy\": \"deny\",\r\n        \"acl_down_policy\": \"extend-cache\",\r\n        \"acl_master_token\": \"master-XXX-9289-977f9434a9d0\",\r\n        \"acl_token\": \"acl--XXX-8ec7-e0c193bbae3c\"\r\n}\r\n```\r\nTried the following - **readui.json**\r\n\r\n```\r\n{\r\n        \"ID\": \"anonymous\",\r\n        \"Type\": \"client\",\r\n        \"Rules\": \"{\\\"key\\\": {\\\"\\\":{\\\"policy\\\":\\\"read\\\"} }\"\r\n}\r\n\r\n```\r\nTrying to access web UI, still getting 403 :(\r\n\r\nAlso tried the following **readui.json**\r\n```\r\n{\r\n        \"ID\": \"anonymous\",\r\n        \"Type\": \"client\",\r\n        \"Rules\": \"{\\\"key\\\": {\\\"\\\": { \\\"policy\\\":\\\"read\\\"}}}\"\r\n}\r\n```\r\n```\r\n[root@node236 ~]# curl -XPUT http://node236.local.net:8500/v1/acl/update?token=$TOKEN -d @consul.acl.json\r\n{\"ID\":\"anonymous\"}\r\n\r\n[root@node236 ~]# curl -s http://node236.local.net:8500/v1/acl/list?token=$TOKEN | jq .[]\r\n{\r\n  \"ID\": \"1cfba52e-d433-4e7b-b50d-4f741c44de18\",\r\n  \"Name\": \"my-app-token-updated\",\r\n  \"Type\": \"client\",\r\n  \"Rules\": \"service\\\"\\\" { policy=\\\"write\\\"}\",\r\n  \"CreateIndex\": 69527,\r\n  \"ModifyIndex\": 69527\r\n}\r\n{\r\n  \"ID\": \"970fdd6b-b64b-416a-9289-977f9434a9d0\",\r\n  \"Name\": \"Master Token\",\r\n  \"Type\": \"management\",\r\n  \"Rules\": \"\",\r\n  \"CreateIndex\": 69145,\r\n  \"ModifyIndex\": 69145\r\n}\r\n{\r\n  \"ID\": \"anonymous\",\r\n  \"Name\": \"\",\r\n  \"Type\": \"client\",\r\n  \"Rules\": \"{\\\"key\\\": {\\\"\\\": { \\\"policy\\\":\\\"read\\\"}}}\",\r\n  \"CreateIndex\": 68089,\r\n  \"ModifyIndex\": 82326\r\n}\r\n{\r\n  \"ID\": \"df5ff7eb-f2d5-fddc-db57-b31244c4f9dc\",\r\n  \"Name\": \"\",\r\n  \"Type\": \"client\",\r\n  \"Rules\": \"\",\r\n  \"CreateIndex\": 70516,\r\n  \"ModifyIndex\": 70516\r\n}\r\n[root@node236 ~]#\r\n```\r\nStill  receiving error 403 :(\r\n\r\nAnyone who came across it ? Any pointers or feedback ? And yes, I have visited https://www.consul.io/docs/internals/acl.html, but I can't seem to find a resolution yet."}}