JWT doesnt have permission for listDocument

// /api/getbots.js


const sdk = require('node-appwrite');



async function getBotLinks(JWT) {
  console.log(JWT)
  console.log('1')

  try {
  const client = new sdk.Client()
      .setEndpoint('https://cloud.appwrite.io/v1') // Your API Endpoint
      .setProject('pysec-tools') // project
      .setJWT(JWT)
      
  const account = new sdk.Account(client);

  const databases = new sdk.Databases(client);
  
  const result = await databases.listDocuments(
      'db', // databaseId
      '66f3feb30027fc479578', // collectionId
      [] // queries (optional)
  );
  console.log(result)
      return [result, null]; 
    
  } catch (error) {
    return [false, error]; // Return false and the error
  }
}

export default async function handler(req, res) {
  const { JWT } = req.body;
  
  // Initialize variables
  let result = null;
  let msg = '';

  try {
    // Correctly destructuring the array returned from checkSession
    [result, msg] = await getBotLinks(JWT.jwt);
  } catch (err) {
   console.log('ERROR!')
   console.log(err.stack)
    return res.json({ result: null, message: err.stack });
  }
console.log(result)
console.log(msg)
  // Return the response with logged_in and message
  return res.json({ result: result, message: msg });
}

async function getLinks() {
const JWT = await account.createJWT();
// Attempt to get the current session
const response = await fetch('/api/getbots', {
          method: 'POST', // Specify the method as POST
          headers: {
            'Content-Type': 'application/json', // Set the content type to JSON
            'Accept': 'application/json' // Specify that you expect a JSON response
          },
          body: JSON.stringify({ JWT: JWT}) // Include the JWT
        })
const result = await response.json(); // Await the JSON parsing

console.log(result)
}
getLinks();