# Error -- : Ridley::Errors::HTTPForbidden: {"error":\["missing create permission"\]}

**URL:** <https://discourse.chef.io/t/error-ridley-errors-httpforbidden-error-missing-create-permission/8206>\
**Category:** Chef Infra (archive)\
**Created:** [April 9, 2016, 7:55pm UTC](https://discourse.chef.io/t/error-ridley-errors-httpforbidden-error-missing-create-permission/8206 "2016-04-09T19:55:01Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![srikar](https://avatars.discourse-cdn.com/v4/letter/s/3ec8ea/32.png) [@srikar](https://discourse.chef.io/u/srikar)\
**Post date:** [April 9, 2016, 7:55pm UTC](https://discourse.chef.io/t/error-ridley-errors-httpforbidden-error-missing-create-permission/8206/1 "2016-04-09T19:55:02Z")

</div>

berks version - 4.0.1  
chefdk 0.10.0

“berks upload --no-ssl-verify” command throws below error.

Error – : Ridley::Errors::HTTPForbidden: {“error”:[“missing create permission”]}

knife.rb

current\_dir = File.dirname( **FILE** )  
log\_level :info  
log\_location STDOUT  
node\_name "testclient"  
client\_key "#{current\_dir}/testclient.pem"  
validation\_client\_name "chef12-validator"  
validation\_key “#{current\_dir}/chef12-validator.pem"  
chef\_server\_url “[https://52.34.xxx.xxx:443/organizations/chef12](https://52.34.xxx.xxx:443/organizations/chef12)"  
cookbook\_path [”#{current\_dir}/…/cookbooks”]  
no\_proxy “chef\_server.corp.com”

testclient client node has full permissions (read, grant, upload, delete) for all modules (admins, users, delivery).

Please advise on what else need to be done for uploading cookbooks using berks.

The below knife cookbook command works fine:  
Knife cookbook upload appvance2 --user delivery --key …/…/.chef/delivery.pem

Thanks much.

Regards,  
Srikar

---

<div class="post-metadata">

**Author:** ![kallistec](https://sea2.discourse-cdn.com/flex016/user_avatar/discourse.chef.io/kallistec/32/23_2.png) [@kallistec](https://discourse.chef.io/u/kallistec)\
**Post date:** [April 14, 2016, 12:35am UTC](https://discourse.chef.io/t/error-ridley-errors-httpforbidden-error-missing-create-permission/8206/2 "2016-04-14T00:35:18Z")

</div>

> [@srikar](#):
>
> Error -- : Ridley::Errors::HTTPForbidden: {"error":["missing create permission"]}

> [@srikar](#):
>
> testclient client node has full permissions (read, grant, upload, delete) for all modules (admins, users, delivery).

The error you got definitely means your user is missing permissions. You could be running `berks` as a different user than you thought, or that user doesn't have the create permission on the cookbooks container.

---

<div class="post-metadata">

**Author:** ![srikar](https://avatars.discourse-cdn.com/v4/letter/s/3ec8ea/32.png) [@srikar](https://discourse.chef.io/u/srikar)\
**Post date:** [April 15, 2016, 6:53pm UTC](https://discourse.chef.io/t/error-ridley-errors-httpforbidden-error-missing-create-permission/8206/3 "2016-04-15T18:53:31Z")

</div>

Thanks much for the help. The issue is resolved.

I updated the knife.rb with the user that works for “knife cookbook upload …” command and “berks upload” works as well.

node\_name "delivery"  
client\_key “#{current\_dir}/delivery.pem”

difference between these users:

“testclient” is a client with full permissions  
"delivery" is listed as a user and shows up in the ‘Administration’ tab of chef server UI

---

<div class="post-metadata">

**Author:** ![srikar](https://avatars.discourse-cdn.com/v4/letter/s/3ec8ea/32.png) [@srikar](https://discourse.chef.io/u/srikar)\
**Post date:** [April 15, 2016, 7:28pm UTC](https://discourse.chef.io/t/error-ridley-errors-httpforbidden-error-missing-create-permission/8206/4 "2016-04-15T19:28:50Z")

</div>

> [@kallistec](#):
>
> or that user doesn't have the create permission on the cookbooks container.

After reading this line from you twice, I went back and did better google search.  
The below discussion has more insights on users/clients/cookbook container/chef-server internals; that you contributed in Oct, 15:

> [@Upload/Create cookbooks using client](https://discourse.chef.io/t/upload-create-cookbooks-using-client/7222):
>
> Hello everyone, I’d like to be able to upload a cookbook to a Chef Server using a ‘client’ and not a ‘user’. Is this supported? If not is it still technically possible? I did try but couldn’t get it to work. I’ll explain what I tried. I went into my Org and created a group called ‘test’. I then gave group ‘test’ list and create access to cookbooks in the Global Permissions. I then created a client called ‘uploader’. I then tried to add client ‘uploader’ to group ‘test’ but kept getting …