User account making batch REST API requests from external application: DELETE method subrequests work in Sandbox but not Production
Issue: When an external application sends a request to the REST API Batch resource on Production, DELETE methods return 401 unauthorized. The user is a System Admin. When Sandbox user does a send, DELETEs are successful in the batch request.
The odd thing is that we are only having issues with DELETE method, not with GET, PATCH, etc methods. The token can't be invalid because GET & PATCH wouldn't work if it was.
Troubleshooting steps we’ve performed:
- Verified user account is system administrator. Profile and
permissions are matching between Sandbox and Production.
- Verified session ID or OAuth token used has not expired nor is invalid.
- Verified correct protocol (using HTTPS not HTTP).