title: ejabberd rest API without authentication, 403 Forbidden (error code 32)
body: <p>I'm trying to access ejabberd rest api without authentication but always get a <code>403 Forbidden</code> response with this body :</p>
  
  <pre><code>{
      "status": "error",
      "code": 32,
      "message": "AccessRules: Account does not have the right to perform the operation."
  }
  </code></pre>
  
  <p>I cannot get an OK response on <code>/api/status</code> endpoint which is a command that all users from 127.0.0.1 should be able to use (see "public commands" section under <code>api_permissions</code> in ejabberd.yml).</p>
  
  <p>Here's the request details (via Insomnia REST client):</p>
  
  <pre><code>&gt; POST /api/status HTTP/1.1
  &gt; User-Agent: insomnia/5.1.0
  &gt; Host: localhost:5280
  &gt; Accept: */*
  &gt; Accept-Encoding: deflate, gzip
  &gt; Content-Type: application/json
  &gt; Content-Length: 2
  | {}
  </code></pre>
  
  <p>Ejabberd version is 17.04, installed from a downloaded deb package and running on Debian 8.8 (jessie) x86_64 as <code>ejabberd</code> user.
  Post install, I simply added the host "localhost", registered a new user "admin" for localhost and added it to the ACLs.</p>
  
  <p>The only changes I made into ejabberd.yml :</p>
  
  <pre><code>hosts:
    - "localhost"
  acl:
    admin:
      user:
        - "admin": "localhost"
  </code></pre>
  
  <p>Otherwise, I can access the webadmin interface which works fine...<br>
  What can I do in order to have a 200 OK response ?</p>