I'm using the Angular $http module to send updates via the PATCH verb. Strangely, it seems to work perfectly fine when accessed by users with administrative privileges, but fails for regular users!
Upon inspecting the request through Chrome's developer tool, I noticed that the request headers look like this:
Request Headers
Provisional headers are shown
Accept:application/json, text/javascript
Content-Type:application/json
Take a look at my code snippet below:
...
atualizar: function(data) {
return $http({
method: 'PATCH',
url: frontend.homeUrl + '/api/sinistro/' + data.id,
responseType: 'json',
data: data,
headers : {
'Content-Type' : 'application/json'
}
});
}
....
If anyone can offer assistance, I'd greatly appreciate it!
SOLUTION
It appears that for a PATCH request, the user accessing the browser needs to have administrator permissions. Alternatively, you may change the request from PATCH to POST.