I recently installed Drupal 4.6.5, and have quickly become smitten with its modularity. I'm trying to post "story" nodes using Ecto over XMLRPC.
I have my admin account for managing the site, and then a less privileged user account for the actual posting/editing. I have installed and activated the blogapi module, and have tried all 3 engines even though from reading other nodes in the Handbook it doesn't seem there is any difference in functionality/capability. I created a new user role solely for this account, and have given that role permissions to literally everything on the "Access controls" page. I don't know if in theory that makes it equal to the admin account or not.
If I set up ecto (Marsedit behaves exactly the same) to post as admin, it works perfectly for making a new story. If I set it up to post as my user, when it first tries to connect to the xmlrpc.php page, I get
"You are not authorized to access this page. A list of blogs could not be retrieved! Please verify the account you created."
I've checked a hundred times that the role is assigned to the user, that the user has all permissions available, etc. At this point I'm wondering if there is a less-obvious module or hidden permission I need to install/activate or if there is a basic conceptual issue I'm missing. I know the user/pass combination is valid, since when I go to the web page it has logged me in as the user even if I was on an admin page!