Issue
-
403 Forbidden error when accessing the following Headless API:
GET /o/headless-admin-taxonomy/v1.0/taxonomy-vocabularies/{VocabularyID}/taxonomy-categories
Environment
- Liferay DXP 2025.Q2
Resolution
- Go to the Control Panel > Security > Service Access Policy
- Create new Service Access policy with the parameters shown on the screenshot
- Service class:
com.liferay.headless.admin.taxonomy.internal.resource.v1_0.BaseTaxonomyCategoryResourceImpl
Method:getTaxonomyVocabularyTaxonomyCategoriesPage - Make sure that the Vocabulary and the Categories are public and can be viewed by Anyone, as shown on the screenshot. Otherwise, the call will return the error code 404.