unauthorized api call from javascript

[aday]

when i make the call to this api endpoint via javascript as a student: 

'/api/v1/accounts/1/external_tools?search_term=%5BIvey&per_page=30'

i get an unauthorized error. (this works for admins and faculty)

is there anyway i can allow students to have read access to this endpoint?

[pklove]

I think the answer is no, unless you give the students some account-level role.

Canvas does not know who is a "student" and who is "faculty" per se.  This is an account level endpoint, so access will depend on account permissions.  Do the faculty who have access have some account level role that is allowing this?