# Private app access token to limit Blog posts read without write access

**URL:** <https://community.hubspot.com/t/private-app-access-token-to-limit-blog-posts-read-without-write-access/91307>\
**Category:** APIs & Integrations\
**Tags:** cms-content\
**Created:** [October 6, 2023, 5:36pm UTC](https://community.hubspot.com/t/private-app-access-token-to-limit-blog-posts-read-without-write-access/91307 "2023-10-06T17:36:54Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![MKyaw](https://avatars.discourse-cdn.com/v4/letter/m/ecb155/32.png) [@MKyaw](https://community.hubspot.com/u/MKyaw)\
**Post date:** [October 6, 2023, 5:36pm UTC](https://community.hubspot.com/t/private-app-access-token-to-limit-blog-posts-read-without-write-access/91307/1 "2023-10-06T17:36:54Z")

</div>

Hello,

I would like to know how I can set up my private app access token only to allow scope for Blog posts read-only (without the write access).

Setting it up with the scope of content also lets me create blog posts.

**Current:**

- The private app access token with scope `content` can make **both** of these API calls
  - GET/cms/v3/blogs/posts
  - POST/cms/v3/blogs/posts

**Expected:**

- The private app access token can **only** make this API call: GET/cms/v3/blogs/posts
- The private app access token **cannot** make this API call: POST/cms/v3/blogs/posts

Thanks.

---

<div class="post-metadata">

**Author:** ![Mike\_Eastwood](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/mike_eastwood/32/70075_2.png) [@Mike\_Eastwood](https://community.hubspot.com/u/Mike_Eastwood)\
**Post date:** [October 7, 2023, 7:55pm UTC](https://community.hubspot.com/t/private-app-access-token-to-limit-blog-posts-read-without-write-access/91307/2 "2023-10-07T19:55:46Z")

</div>

Hi @MKyaw

My understand is the two [scopes for managing content](https://developers.hubspot.com/docs/api/working-with-oauth#scopes) (`cms.source_code.read_write` and `content` ) are both read **and** write.

Can you restrict write access using your integration?

I’ve seen lots of changes to the API Scopes over the years, they are getting much more granular - which is great.

You can submit an idea (which I’m happy to upvote) which will help the team prioritise new features. Sharing the idea that @MKyaw created so that others can upvote and comment on as well: [Private app access token to limit Blog posts read without write access](https://community.hubspot.com/t/private-app-access-token-to-limit-blog-posts-read-without-write-access/91414#M156900)

Have fun

Mike

Here to learn more about HubSpot and share my HubSpot Knowledge. I’m the founder of [Webalite](https://www.webalite.com?utm_campaign=community-forum&utm_source=community&utm_content=signature) a HubSpot Partner Agency based in Wellington, New Zealand and the founder of **Portal-iQ** the world’s first automated [HubSpot Portal Audit](https://portal-iq.com?utm_campaign=community-forum&utm_source=community-forum&utm_content=signature) that helps you work smarter with HubSpot.

---

<div class="post-metadata">

**Author:** ![MKyaw](https://avatars.discourse-cdn.com/v4/letter/m/ecb155/32.png) [@MKyaw](https://community.hubspot.com/u/MKyaw)\
**Post date:** [October 9, 2023, 5:22pm UTC](https://community.hubspot.com/t/private-app-access-token-to-limit-blog-posts-read-without-write-access/91307/3 "2023-10-09T17:22:09Z")

</div>

Thanks, [@Mike\_Eastwood](https://community.hubspot.com/t5/user/viewprofilepage/user-id/9259) for the response.

I have submitted the idea [here](https://community.hubspot.com/t5/HubSpot-Ideas/Private-app-access-token-to-limit-Blog-posts-read-without-write/idi-p/861802#M156900).