Function went from fine to nonfunctioning without change

url = "https://www.zohoapis.com/crm/v7/Accounts/" + id + "/Attachments/" + attach_id;
file_engage = invokeurl
[
url :url
type :GET
connection:"zoho_attachments"
];

The attach id is grabbed from a file upload field

account = zoho.crm.getRecordById("Accounts",id);

proposal = account.get("Proposal");

for each r in proposal

{

attach_id = r.get("attachment_Id");

and now instead of returning a file the invoke url returns

{"code":"INVALID_DATA","details":{"resource_path_index":2},"message":"no permission to perform an action on this record","status":"error"}

The connection has not changed and meets all instructions as laid out in the API. https://www.zoho.com/crm/developer/docs/api/v7/download-attachments.html

I'm baffled since nothing changed in the function or connection and it just now no longer works.

It spits out the same permission error when just testing out

url2 = "https://www.zohoapis.com/crm/v7/Accounts/" + id + "/Attachments?fields=fields=id,Owner,File_Name,Created_Time";

which doesn't even require a correct attachment ID as a possible source of error.