Solved - Permission Issue

General General Questions
1

Background: A couple of years ago, I added two Access Restriction rules to limit access to the Admin panel. They both seem to work. I cannot access the panel when I deactivate them. One rule contains my local IP range (i.e. 172.16.0.1 - 172.16.0.255). The other rule contains the single public IP address of my proxy.

I can access all of my Admin panel via local IP address and from my proxy IP address.

The problem that I encounter is that I get a generic 403 or a "Error Oops, something went wrong (Forbidden). Please try again." error message when I try to edit certain things in the Admin panel via the proxy. I can edit anything via local IP without issue.

So far, I have found that I get the permission error when trying to activate/deactivate any block in Design->Layouts and when trying to create or save edits to a product. I can save edits under Setting->General. Again, this issue only affects access via the public proxy.

This is all that I have tested so far.

2

I neglected to mention that I recently upgraded to CS-Cartv4.15.1.SP4.

I'm not sure when this issue started; before or after the upgrade.

3

Hello!

This sounds like the effect of the mod_security enabled at your server, so I recommend you to contact your server administrator and disable it:

https://docs.cs-cart.com/latest/install/possible_issues/forbidden_not_acceptable_errors.html

I hope it will help you.

4

Hello!

This sounds like the effect of the mod_security enabled at your server, so I recommend you to contact your server administrator and disable it:

https://docs.cs-cart.com/latest/install/possible_issues/forbidden_not_acceptable_errors.html

I hope it will help you.

mod_security is not installed on the server but the gateway IPS is being triggered. Thanks!

Age helped me to forget to check there first :oops:

1 Like