I had to give a RESTlet access the other day, and when I created the user for it to login, I had to give that user the role of Full Access for the RESTlet to work