# Bonita Portal URLs API call with admin

**URL:** <https://community.ofelia.com/t/bonita-portal-urls-api-call-with-admin/9111>\
**Category:** Q&A\
**Created:** [30 May 2018 07:23 UTC](https://community.ofelia.com/t/bonita-portal-urls-api-call-with-admin/9111 "2018-05-30T07:23:36Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![qfau\_1373933](https://avatars.discourse-cdn.com/v4/letter/q/f9ae1b/32.png) [@qfau\_1373933](https://community.ofelia.com/u/qfau_1373933)\
**Post date:** [30 May 2018 07:23 UTC](https://community.ofelia.com/t/bonita-portal-urls-api-call-with-admin/9111/1 "2018-05-30T07:23:36Z")

</div>

Hi,

I would like to call the API http://\*\*\ ***:** /bonita/portal/form/taskInstance/0000064  
with an admin user. because when i call this API with a normal user that doesn’t have right on this task, i get a 403 Forbidden error.

---

<div class="post-metadata">

**Author:** ![mtsiak\_1358773](https://avatars.discourse-cdn.com/v4/letter/m/7c8e57/32.png) [@mtsiak\_1358773](https://community.ofelia.com/u/mtsiak_1358773)\
**Post date:** [31 May 2018 07:10 UTC](https://community.ofelia.com/t/bonita-portal-urls-api-call-with-admin/9111/2 "2018-05-31T07:10:38Z")

</div>

You could create a REST Get connector in your task and save the output to a process variable. You could then print the variable on your form.

Apologies if this is not the case.

---

<div class="post-metadata">

**Author:** ![qfau\_1373933](https://avatars.discourse-cdn.com/v4/letter/q/f9ae1b/32.png) [@qfau\_1373933](https://community.ofelia.com/u/qfau_1373933)\
**Post date:** [31 May 2018 14:19 UTC](https://community.ofelia.com/t/bonita-portal-urls-api-call-with-admin/9111/3 "2018-05-31T14:19:45Z")

</div>

That’s not what i want to do. I want to display the task in an iframe in my angularJS application.  
I see in the bonita documentation that there is a param in the taskInstance api : user= “Identifies the user you perform the task for (for administrators and process managers).”  
But when i use it, it doesn’t change anything

---

<div class="post-metadata">

**Author:** ![qfau\_1373933](https://avatars.discourse-cdn.com/v4/letter/q/f9ae1b/32.png) [@qfau\_1373933](https://community.ofelia.com/u/qfau_1373933)\
**Post date:** [31 May 2018 14:20 UTC](https://community.ofelia.com/t/bonita-portal-urls-api-call-with-admin/9111/4 "2018-05-31T14:20:12Z")

</div>

That’s not what i want to do. I want to display the task in an iframe in my angularJS application.  
I see in the bonita documentation that there is a param in the taskInstance api : user= “Identifies the user you perform the task for (for administrators and process managers).”  
But when i use it, it doesn’t change anything
