# The NEW A042 API for A&G - does not bring all attachments

**URL:** <https://developer.community.nhs.uk/t/the-new-a042-api-for-a-g-does-not-bring-all-attachments/14428>\
**Category:** e-Referral Service FHIR API\
**Tags:** testing\
**Created:** [17 August 2026 10:47 UTC](https://developer.community.nhs.uk/t/the-new-a042-api-for-a-g-does-not-bring-all-attachments/14428 "2026-08-17T10:47:40Z")\
**Posts on this page:** 18\
**Page:** 1

<div class="post-metadata">

**Author:** ![v.jaisinghani](https://avatars.discourse-cdn.com/v4/letter/v/9e8a1a/32.png) [@v.jaisinghani](https://developer.community.nhs.uk/u/v.jaisinghani)\
**Post date:** [17 August 2026 10:47 UTC](https://developer.community.nhs.uk/t/the-new-a042-api-for-a-g-does-not-bring-all-attachments/14428/1 "2026-08-17T10:47:40Z")

</div>

Hi Team,

We are doing testing for A&G Worklist retrieval in TST environment  
We saw “Forbidden” errors when trying to turn on the new API.  
Mainly its not bringing any attachments

---

<div class="post-metadata">

**Author:** ![tony.marsh1](https://dub1.discourse-cdn.com/nhsdigitaldeveloper/user_avatar/developer.community.nhs.uk/tony.marsh1/32/855_2.png) [@tony.marsh1](https://developer.community.nhs.uk/u/tony.marsh1)\
**Post date:** [18 August 2026 15:44 UTC](https://developer.community.nhs.uk/t/the-new-a042-api-for-a-g-does-not-bring-all-attachments/14428/3 "2026-08-18T15:44:39Z")

</div>

Hi,

Sorry you’re having issues, I’m not quite sure what the issue is based on the above comment though. Do you mind expanding a little key info that would help is:

- which environment is this in
- do you have a correlation ID
- which app id’s are you using?
- what the expected result was vs what the actual result was
- endpoints being used

---

<div class="post-metadata">

**Author:** ![v.jaisinghani](https://avatars.discourse-cdn.com/v4/letter/v/9e8a1a/32.png) [@v.jaisinghani](https://developer.community.nhs.uk/u/v.jaisinghani)\
**Post date:** [20 August 2026 10:18 UTC](https://developer.community.nhs.uk/t/the-new-a042-api-for-a-g-does-not-bring-all-attachments/14428/4 "2026-08-20T10:18:00Z")

</div>

Hi Tony,

Thanks for the response

Below are the responses

- Environment: INT
- Correlation ID : uuid:f436514e-97c4-11f1-a6bd-005056964e38
- App id’s: We are using 2- sharing both
  - 5ee60453-d251-4f45-9541-4a62d7fcc5b5
  - 660c3b81-b5ed-4267-8dd2-76dfdda0d65e

- what the expected result was vs what the actual result was:
  - Expected: Pull attachments to Epic EPR
  - Actual: Attachments missing and forbidden error logged

- endpoints being used : A042

Let me know if there is any other question  
thanks

---

<div class="post-metadata">

**Author:** ![tony.marsh1](https://dub1.discourse-cdn.com/nhsdigitaldeveloper/user_avatar/developer.community.nhs.uk/tony.marsh1/32/855_2.png) [@tony.marsh1](https://developer.community.nhs.uk/u/tony.marsh1)\
**Post date:** [28 August 2026 08:34 UTC](https://developer.community.nhs.uk/t/the-new-a042-api-for-a-g-does-not-bring-all-attachments/14428/5 "2026-08-28T08:34:36Z")

</div>

Hi,

Just letting you know, one of the team has identified this issue. As your ASIDs are quite old, they need to be refreshed to get some of the latest endpoints.

I’ve raised a ticket, this should be complete next week - I’ll let you know when its ready to re-test.

---

<div class="post-metadata">

**Author:** ![tony.marsh1](https://dub1.discourse-cdn.com/nhsdigitaldeveloper/user_avatar/developer.community.nhs.uk/tony.marsh1/32/855_2.png) [@tony.marsh1](https://developer.community.nhs.uk/u/tony.marsh1)\
**Post date:** [3 September 2026 12:11 UTC](https://developer.community.nhs.uk/t/the-new-a042-api-for-a-g-does-not-bring-all-attachments/14428/6 "2026-09-03T12:11:43Z")

</div>

Sorry for the delay on this - chasing a progress update on your behalf.

---

<div class="post-metadata">

**Author:** ![tony.marsh1](https://dub1.discourse-cdn.com/nhsdigitaldeveloper/user_avatar/developer.community.nhs.uk/tony.marsh1/32/855_2.png) [@tony.marsh1](https://developer.community.nhs.uk/u/tony.marsh1)\
**Post date:** [3 September 2026 15:49 UTC](https://developer.community.nhs.uk/t/the-new-a042-api-for-a-g-does-not-bring-all-attachments/14428/7 "2026-09-03T15:49:16Z")

</div>

@v.jaisinghani Your ASIDs have been updated - please re-try and let me know they are working as expected for A042 👍

---

<div class="post-metadata">

**Author:** ![v.jaisinghani](https://avatars.discourse-cdn.com/v4/letter/v/9e8a1a/32.png) [@v.jaisinghani](https://developer.community.nhs.uk/u/v.jaisinghani)\
**Post date:** [16 September 2026 13:47 UTC](https://developer.community.nhs.uk/t/the-new-a042-api-for-a-g-does-not-bring-all-attachments/14428/8 "2026-09-16T13:47:22Z")

</div>

Hi Tony,

Thanks for the update.

We have tested this and used the below message to sent for worklist retrieval (2ffe196f-b1c6-11f1-97f7-005056964e38). The retrieval completes successfully and the messages are received; however, the attachments are still missing.

Interestingly, when we revert the ASIDs back to the previous values, the attachments are retrieved correctly and are visible as expected.

This suggests the issue may be related to the new ASIDs rather than the retrieval process itself.

I think below are the ASIDs we use in INT, can you confirm which ones are updated to allow the APIs to retrive through referrals

ASID 200000002206

ASID 200000002197

Thanks,

---

<div class="post-metadata">

**Author:** ![tony.marsh1](https://dub1.discourse-cdn.com/nhsdigitaldeveloper/user_avatar/developer.community.nhs.uk/tony.marsh1/32/855_2.png) [@tony.marsh1](https://developer.community.nhs.uk/u/tony.marsh1)\
**Post date:** [17 September 2026 09:25 UTC](https://developer.community.nhs.uk/t/the-new-a042-api-for-a-g-does-not-bring-all-attachments/14428/9 "2026-09-17T09:25:44Z")

</div>

Hi @v.jaisinghani For the avoidance of doubt can you send the application IDs of the apps you are using in INT, you may be using one for user restricted, and one for application restricted. Then I can match the associated ASID and make sure we both understand the associations 🙂

---

<div class="post-metadata">

**Author:** ![v.jaisinghani](https://avatars.discourse-cdn.com/v4/letter/v/9e8a1a/32.png) [@v.jaisinghani](https://developer.community.nhs.uk/u/v.jaisinghani)\
**Post date:** [17 September 2026 15:40 UTC](https://developer.community.nhs.uk/t/the-new-a042-api-for-a-g-does-not-bring-all-attachments/14428/10 "2026-09-17T15:40:12Z")

</div>

Hi tony

The user restricted one is  
**Application ID**

5ee60453-d251-4f45-9541-4a62d7fcc5b5

And for INt is  
**Application ID**

660c3b81-b5ed-4267-8dd2-76dfdda0d65e

Let me know if you need anything else.  
thanks

---

<div class="post-metadata">

**Author:** ![tony.marsh1](https://dub1.discourse-cdn.com/nhsdigitaldeveloper/user_avatar/developer.community.nhs.uk/tony.marsh1/32/855_2.png) [@tony.marsh1](https://developer.community.nhs.uk/u/tony.marsh1)\
**Post date:** [22 September 2026 14:33 UTC](https://developer.community.nhs.uk/t/the-new-a042-api-for-a-g-does-not-bring-all-attachments/14428/11 "2026-09-22T14:33:37Z")

</div>

> [@v.jaisinghani](#):
>
> 660c3b81-b5ed-4267-8dd2-76dfdda0d65e

Hi I have sent this to ITOC to ensure they are updated, I feel something else may be happening here also, are you able to send some correlation IDs of the event when you are missing attachments. Could you also explain what you mean by revert ASIDs, as this isn’t an action that you are able to perform, we add the ASIDs as attributes on your behalf and we did not amend them 🙂

---

<div class="post-metadata">

**Author:** ![v.jaisinghani](https://avatars.discourse-cdn.com/v4/letter/v/9e8a1a/32.png) [@v.jaisinghani](https://developer.community.nhs.uk/u/v.jaisinghani)\
**Post date:** [1 October 2026 13:18 UTC](https://developer.community.nhs.uk/t/the-new-a042-api-for-a-g-does-not-bring-all-attachments/14428/12 "2026-10-01T13:18:47Z")

</div>

Hi Tony

Thanks.  
Our corelation id is: uuid:84e036b1-bd8d-11f1-97f7-005056964e38

This is what we are getting  
“[https://www.hl7.org/fhir/R4/operationoutcome.html"]},“issue”:[{“severity”:“error”,“code”:"forbidden…](https://www.hl7.org/fhir/R4/operationoutcome.html%22%5D%7D,%22issue%22:%5B%7B%22severity%22:%22error%22,%22code%22:%22forbidden%22,%22diagnostics%22:%22The "https://www.hl7.org/fhir/r4/operationoutcome.html%22]%7d,%22issue%22:[%7b%22severity%22:%22error%22,%22code%22:%22forbidden%22,%22diagnostics%22:%22the") ASID (200000002197) does not have the interaction (urn:nhs:names:services:ers:READ\_BINARY\_R4\_V001) required to call this endpoint.”,“details”:{“coding”:[{“system”:"[https://fhir.nhs.uk/CodeSystem/http-error-codes",“code”:“REC\_FORBIDDEN”}]}}]}](https://fhir.nhs.uk/CodeSystem/http-error-codes%22,%22code%22:%22REC_FORBIDDEN%22%7D%5D%7D%7D%5D%7D "https://fhir.nhs.uk/codesystem/http-error-codes%22,%22code%22:%22rec\_forbidden%22%7d]%7d%7d]%7d")

---

<div class="post-metadata">

**Author:** ![tony.marsh1](https://dub1.discourse-cdn.com/nhsdigitaldeveloper/user_avatar/developer.community.nhs.uk/tony.marsh1/32/855_2.png) [@tony.marsh1](https://developer.community.nhs.uk/u/tony.marsh1)\
**Post date:** [1 October 2026 14:04 UTC](https://developer.community.nhs.uk/t/the-new-a042-api-for-a-g-does-not-bring-all-attachments/14428/13 "2026-10-01T14:04:31Z")

</div>

> [@v.jaisinghani](#):
>
> 200000002197

Thanks, has this been tried today? We recently refresh all ASIDs to include all latest interactions, this was on the list so ‘should’ be updated. If this was tried just now and doesnt work, let me know and we will figure it out.

---

<div class="post-metadata">

**Author:** ![v.jaisinghani](https://avatars.discourse-cdn.com/v4/letter/v/9e8a1a/32.png) [@v.jaisinghani](https://developer.community.nhs.uk/u/v.jaisinghani)\
**Post date:** [1 October 2026 15:17 UTC](https://developer.community.nhs.uk/t/the-new-a042-api-for-a-g-does-not-bring-all-attachments/14428/14 "2026-10-01T15:17:49Z")

</div>

Hi Tony,  
Yes is done today.  
Still no luck

---

<div class="post-metadata">

**Author:** ![tony.marsh1](https://dub1.discourse-cdn.com/nhsdigitaldeveloper/user_avatar/developer.community.nhs.uk/tony.marsh1/32/855_2.png) [@tony.marsh1](https://developer.community.nhs.uk/u/tony.marsh1)\
**Post date:** [2 October 2026 09:59 UTC](https://developer.community.nhs.uk/t/the-new-a042-api-for-a-g-does-not-bring-all-attachments/14428/15 "2026-10-02T09:59:54Z")

</div>

> [@v.jaisinghani](#):
>
> READ\_BINARY\_R4\_V001

looking at this today, and requesting it is investigated/added for you - will respond on here

---

<div class="post-metadata">

**Author:** ![tony.marsh1](https://dub1.discourse-cdn.com/nhsdigitaldeveloper/user_avatar/developer.community.nhs.uk/tony.marsh1/32/855_2.png) [@tony.marsh1](https://developer.community.nhs.uk/u/tony.marsh1)\
**Post date:** [2 October 2026 10:29 UTC](https://developer.community.nhs.uk/t/the-new-a042-api-for-a-g-does-not-bring-all-attachments/14428/16 "2026-10-02T10:29:47Z")

</div>

Hi we have raised a service ticket CS1686531 for this, the reason it was missed is that the ITOC team were cautious over general updates as this looks to be a bespoke EPIC ASID with different interactions within it. I’ve requested this single interaction is added to the ASID, rather than a global update of the overall API ‘product’ which may risk over writing the ASID and non-ers interactions.

---

<div class="post-metadata">

**Author:** ![tony.marsh1](https://dub1.discourse-cdn.com/nhsdigitaldeveloper/user_avatar/developer.community.nhs.uk/tony.marsh1/32/855_2.png) [@tony.marsh1](https://developer.community.nhs.uk/u/tony.marsh1)\
**Post date:** [7 October 2026 08:04 UTC](https://developer.community.nhs.uk/t/the-new-a042-api-for-a-g-does-not-bring-all-attachments/14428/17 "2026-10-07T08:04:13Z")

</div>

Hello,

The interaction has now been added and ready to test

---

<div class="post-metadata">

**Author:** ![v.jaisinghani](https://avatars.discourse-cdn.com/v4/letter/v/9e8a1a/32.png) [@v.jaisinghani](https://developer.community.nhs.uk/u/v.jaisinghani)\
**Post date:** [7 October 2026 11:13 UTC](https://developer.community.nhs.uk/t/the-new-a042-api-for-a-g-does-not-bring-all-attachments/14428/18 "2026-10-07T11:13:53Z")

</div>

Hi Tony,

Thanks for this.  
Just did another test, same error as before:

The ASID (200000002197) does not have the interaction (urn:nhs:names:services:ers:READ\_BINARY\_R4\_V001) required to call this endpoint.",“details”:{“coding”:[{“system”:“[https://fhir.nhs.uk/CodeSystem/http-error-codes",“code”:"REC\_FORBIDDEN](https://fhir.nhs.uk/CodeSystem/http-error-codes%22,%22code%22:%22REC_FORBIDDEN)”

Message ID - uuid:c64fc5e9-c22a-11f1-97f7-005056964e38

---

<div class="post-metadata">

**Author:** ![tony.marsh1](https://dub1.discourse-cdn.com/nhsdigitaldeveloper/user_avatar/developer.community.nhs.uk/tony.marsh1/32/855_2.png) [@tony.marsh1](https://developer.community.nhs.uk/u/tony.marsh1)\
**Post date:** [9 October 2026 14:57 UTC](https://developer.community.nhs.uk/t/the-new-a042-api-for-a-g-does-not-bring-all-attachments/14428/19 "2026-10-09T14:57:27Z")

</div>

Hi @v.jaisinghani The Team looked into this and confirmed the interaction is present on the ASID, so its a little strange it still does not work. However, they had tried again, and refreshed the interaction, please could you re-test on Monday, and confirm. If the test fails please could you provide a correlation ID.
