Forums

Unfortunately no one can be told what FluxBB is - you have to see it for yourself.

You are not logged in.

#1 2021-01-10 13:05:12

Gil
Member
From: France
Registered: 2008-05-10
Posts: 179

Permission Issue in admin user list (403)

Hi all,
When using the Users search form of the admin area, I always get a "Forbidden - You don't have permission to access this resource" error.
I'm using the 1.5.11 version; I didn't have this issue in my previous version (1.4.9). Every other forms and functions seem to work perfectly.

What I can see is that if I remove the "&user_group=" pattern in the URL, it works perfectly. With this user_group parameter (whatever the value is, -1 or e.g. 4), I get the error.

Any idea?

The complete search URL is (CR added for clarity):

admin_users.php?form[username]=xxx&form[email]=&form[title]=&form[realname]=&
form[url]=&form[jabber]=&form[icq]=&form[msn]=&form[aim]=&form[yahoo]=&
form[location]=&form[signature]=&form[admin_note]=&posts_greater=&posts_less=&
last_post_after=&last_post_before=&last_visit_after=&last_visit_before=&
registered_after=&registered_before=&order_by=username&direction=ASC&
user_group=4&find_user=Lancer+la+recherche

Last edited by Gil (2021-01-10 17:36:00)

Offline

#2 2021-01-10 13:30:50

Visman
Member
From: Siberia
Registered: 2010-07-10
Posts: 1,476
Website

Re: Permission Issue in admin user list (403)

Can the security module (like ModSecurity) work on the server itself (apache/nginx) and it is buggy?

Offline

#3 2021-01-10 16:56:07

Gil
Member
From: France
Registered: 2008-05-10
Posts: 179

Re: Permission Issue in admin user list (403)

Visman wrote:

Can the security module (like ModSecurity) work on the server itself (apache/nginx) and it is buggy?

Yeh, great help, thanks Visman, I searched some information about ModSecurity, and you know what? I found an exchange between Franz and.... me. It was in 2013, and I totally forgot about this discussion! roll
The Mod Security firewall module of my host does not like "user_group" pattern sad

Here : https://fluxbb.org/forums/viewtopic.php … 476#p51476

I'll try the same change ("user_group"/'user_group' replaced by "usergroup"/'usergroup' in the admin_users file).

Last edited by Gil (2021-01-10 17:37:26)

Offline

#4 2021-01-10 17:36:31

Gil
Member
From: France
Registered: 2008-05-10
Posts: 179

Re: Permission Issue in admin user list (403)

And... Of course, it works smile

Offline

Board footer

Powered by FluxBB