Getting "Forbidden Access" working through tutorial
I'm working through the OAuth tutorial (http://developer.yahoo.com/oauth/guide/oauth_flow_tutorial.html), which works fine for the contacts data, but when I substitute a fantasy sports URL I get Forbidden Access. I've double-checked the Access Scopes, and the key I'm using has Read permissions for both Fantasy Sports and Contacts.
I guess the main question would be, whose user information are you looking for? Most fantasy information is private, at least as far as we consider it, so the services are mainly designed to only expose the information allowable for the specific user granting access to your application. Also, we actually aren't using GUIDs to index our user service. So, two things:
That'll make the request on behalf of whoever is granting access to your application.
Worth noting that there's actually a bug that I think we're fixing at some point where we can't retrieve data for users who play in games that we actually don't support yet (ie, some Pick'em games, or the Basketball and Hockey draft & trade games). Pretty sure we'll be rolling out a fix for that soon. In the meantime, you can just scope your request to certain games: