Discrepancy between UI and REST API

[Robert Egan]

I have a situation where a user receives a permission error when trying to access an attachment via the REST API

/rest/api/content/259001565/child/attachment?filename=CCMS_CI.csv

Yet they CAN access the same attachment through the Confluence UI

/download/attachments/259001565/CCMS_CI.csv

Any ideas as to why this might be the case?

[aorlov]

@Robert Egan 

Did your user provide a personal access token for this request?