We have a managed package in the AppExchange that leverages the SF REST API for data access outside of our users' orgs. Within our managed package is a RestResource class that verifies the user's license for our tool. We seem to be running into an issue with a Group Edition user that attempts to use our tool and gets the message 'The REST API is not enabled for this organization' when attempting to authenticate using our managed package's Rest Resource class.
We sent a request to Salesforce for our managed package to be whitelisted for API access by GE and PE orgs a few months ago and were approved. Why might this still be happening?