Private app access token to limit Blog posts read without write access

Developer Support APIs & Integrations
1

Hello,

I would like to know how I can set up my private app access token only to allow scope for Blog posts read-only (without the write access).

Setting it up with the scope of content also lets me create blog posts.

Current:

  • The private app access token with scope `content` can make both of these API calls
    • GET/cms/v3/blogs/posts
    • POST/cms/v3/blogs/posts

Expected:

  • The private app access token can only make this API call: GET/cms/v3/blogs/posts
  • The private app access token cannot make this API call: POST/cms/v3/blogs/posts

Thanks.

2

Hi @MKyaw

My understand is the two scopes for managing content (cms.source_code.read_write and content ) are both read and write.

Can you restrict write access using your integration?

I’ve seen lots of changes to the API Scopes over the years, they are getting much more granular - which is great.

You can submit an idea (which I’m happy to upvote) which will help the team prioritise new features. Sharing the idea that @MKyaw created so that others can upvote and comment on as well: Private app access token to limit Blog posts read without write access

Have fun

Mike

Here to learn more about HubSpot and share my HubSpot Knowledge. I’m the founder of Webalite a HubSpot Partner Agency based in Wellington, New Zealand and the founder of Portal-iQ the world’s first automated HubSpot Portal Audit that helps you work smarter with HubSpot.

3

Thanks, @Mike_Eastwood for the response.

I have submitted the idea here.