Hi, After years, i’m back into the EE boat with a project almost finised, …but!
When updating entries from the CP or the frontend, or sometimes when saving changes to the fields or channels, I’m randomly blocked by a ‘403 Error - Not allowed to perform that action’. What could that come from?
I found some previous forum threads about, but they were all closed/locked by the admins, so still have no clue. If something was really wrong it would be 403 on each request, instead of praying each time I click Save 😊
Was about to make the content editable on the frontend, but have to roll back and put everything in templates as I can edit them on my machine and put them online without attempting to “save” in the process.
That sounds like a Mod Security issue as it’s seemingly random. Have a look at the server logs to see if any Mod_Sec rules are being triggered when you save and get the error. Disable any offending rules then re-test - you may need to disable several rules. If you don’t have access to the logs ask your host to have a look and disable any rules they find that have been triggered.
403 means access denied by a firewall, like Rob said, it’s likely you have Mod Security enabled, and their rules are too strict. You can either whitelist the rules manually or ask your host to completely disable mod security for your site.
If they use normal rules I don’t think it should cause any triggering. Check your web server logs, and it should tell you what is causing the 403 error.