I am trying to throw an XML package at the blog modules API. I have successfully thrown a post at it and the blog post appears on the blog module.
However when I try to hit the deletePost endpoint I get the following response "Your access to this blog is not permitted. Please check your credentials."
I can see on Git that receiving endpoint calls "RequireEditPermission()" so I assume it checks against users in the module's Edit roles... I am, for testing, passing Super User credentials... so I do not understand why I would be denied here.
Am I missing something? I know when I feed the request incorrect login credentials it response with an error suiting the case... so I am left with believing its in the permissions...