search

etcluvic / hsscommons

0 stars 2 forks source link

HTTP 403 errors, group files #250

Open etcluvic opened 2 weeks ago

etcluvic commented 2 weeks ago

In the "Files" section within groups, there is an issue with HTTP 403 Forbidden error messages. If go into the "Files" section within any group and click on a file, you will see an option to download the file. Clicking on Download immediately returns a 403 error: "You are not authorized to visit this page. Access denied". This error appears regardless of user permissions or file type.

Notably, the 403 errors do not appear on the test instance. What might be causing the issue to appear on production but not on test?

etcluvic commented 2 weeks ago

@leenapthine

We now think there may be an issue with the server firewall. This current issue is almost identical to another HTTP 403 issue we experienced with a different project; in the previous case, images, fonts, JavaScript, and themes were encountering 403 Forbidden error messages because of a conflict with the server firewall. It would be worth checking with system administrators to see if the production server firewall is causing the same 403 errors.

leenapthine commented 2 weeks ago

I just sent an email over to sysadmin and will let you know when I hear back.