Error 403 | when creating new discussions

r4nchy

I am trying to create a discussion, but while creating some discussions I face this error

Not sure what this is about

[deleted]

r4nchy That's not a Flarum generated message - I'd speak to your hosting provider about that. It's generated by Litespeed, so likely a configuration issue on that end.

Braden

xasharma "minimum-stability": "dev" 😂😂😂💔 you were ahead bruh

Now how to solve r4nchy Issue

r4nchy

Here is the Error when posting via API

{"errors":[{"status":"403","code":"permission_denied","detail":"Flarum\User\Exception\PermissionDeniedException in \/home\/USERNAME\/public_html\/vendor\/flarum\/core\/src\/User\/User.php:606\nStack trace:\n#0 \/home\/USERNAME\/public_html\/vendor\/flarum\/core\/src\/User\/User.php(634): Flarum\User\User-\u003EassertPermission(false)\n#1 \/home\/USERNAME\/public_html\/vendor\/flarum\/core\/src\/Discussion\/Command\/StartDiscussionHandler.php(59): Flarum\User\User-\u003EassertCan(\u0027startDiscussion\u0027)\n#2 \/home\/USERNAME\/public_html\/vendor\/illuminate\/bus\/Dispatcher.php(122): Flarum\Discussion\Command\StartDiscussionHandler-\u003Ehandle(Object(Flarum\Discussion\Command\StartDiscussion))\n#3 \/home\/USERNAME\/public_html\/vendor\/illuminate\/pipeline\/Pipeline.php(128): Illuminate\Bus\Dispatcher-\u003EIlluminate\Bus\{closure}(Object(Flarum\Discussion\Command\StartDiscussion))\n#4 \/home\/USERNAME\/public_html\/vendor\/illuminate\/pipeline\/Pipeline.php(103): Illuminate\Pipeline\Pipeline-\u003EIlluminate\Pipeline\{closure}(Object(Flarum\Discussion\Command\StartDiscussion))\n#5 \/home\/USERNAME\/public_html\/vendor\/illuminate\/bus\/Dispatcher.php(132): Illuminate\Pipeline\Pipeline-\u003Ethen(Object(Closure))\n#6 \/home\/USERNAME\/public_html\/vendor\/illuminate\/bus\/Dispatcher.php(78): Illuminate\Bus\Dispatcher-\u003EdispatchNow(Object(Flarum\Discussion\Command\StartDiscussion))\n#7 \/home\/USERNAME\/public_html\/vendor\/flarum\/core\/src\/Api\/Controller\/CreateDiscussionController.php(61): Illuminate\Bus\Dispatcher-\u003Edispatch(Object(Flarum\Discussion\Command\StartDiscussion))\n#8 \/home\/USERNAME\/public_html\/vendor\/flarum\/core\/src\/Api\/Controller\/AbstractSerializeController.php(110): Flarum\Api\Controller\CreateDiscussionController-\u003Edata(Object(Laminas\Diactoros\ServerRequest), Object(Tobscure\JsonApi\Document))\n#9 \/home\/USERNAME\/public_html\/vendor\/flarum\/core\/src\/Api\/Controller\/AbstractCreateController.php(22): Flarum\Api\Controller\AbstractSerializeController-\u003Ehandle(Object(Laminas\Diactoros\ServerRequest))\n#10 \/home\/USERNAME\/public_html\/vendor\/flarum\/core\/src\/Http\/RouteHandlerFactory.php(41): Flarum\Api\Controller\AbstractCreateController-\u003Ehandle(Object(Laminas\Diactoros\ServerRequest))\n#11 \/home\/USERNAME\/public_html\/vendor\/flarum\/core\/src\/Http\/Middleware\/ExecuteRoute.php(27): Flarum\Http\RouteHandlerFactory-\u003EFlarum\Http\{closure}(Object(Laminas\Diactoros\ServerRequest), Array)\n#12 \/home\/USERNAME\/public_html\/vendor\/laminas\/laminas-stratigility\/src\/Next.php(51): Flarum\Http\Middleware\ExecuteRoute-\u003Eprocess(Object(Laminas\Diactoros\ServerRequest), Object(Closure))\n#13 \/home\/USERNAME\/public_html\/vendor\/flarum\/core\/src\/Api\/Middleware\/ThrottleApi.php(33): Laminas\Stratigility\Next-\u003Ehandle(Object(Laminas\Diactoros\ServerRequest))\n#14 \/home\/USERNAME\/public_html\/vendor\/laminas\/laminas-stratigility\/src\/Next.php(51): Flarum\Api\Middleware\ThrottleApi-\u003Eprocess(Object(Laminas\Diactoros\ServerRequest), Object(Laminas\Stratigility\Next))\n#15 \/home\/USERNAME\/public_html\/vendor\/flarum\/core\/src\/Http\/Middleware\/CheckCsrfToken.php(40): Laminas\Stratigility\Next-\u003Ehandle(Object(Laminas\Diactoros\ServerRequest))\n#16 \/home\/USERNAME\/public_html\/vendor\/laminas\/laminas-stratigility\/src\/Next.php(51): Flarum\Http\Middleware\CheckCsrfToken-\u003Eprocess(Object(Laminas\Diactoros\ServerRequest), Object(Laminas\Stratigility\Next))\n#17 \/home\/USERNAME\/public_html\/vendor\/flarum\/core\/src\/Http\/Middleware\/ResolveRoute.php(67): Laminas\Stratigility\Next-\u003Ehandle(Object(Laminas\Diactoros\ServerRequest))\n#18 \/home\/USERNAME\/public_html\/vendor\/laminas\/laminas-stratigility\/src\/Next.php(51): Flarum\Http\Middleware\ResolveRoute-\u003Eprocess(Object(Laminas\Diactoros\ServerRequest), Object(Laminas\Stratigility\Next))\n#19 \/home\/USERNAME\/public_html\/vendor\/flarum\/core\/src\/Http\/Middleware\/SetLocale.php(51): Laminas\Stratigility\Next-\u003Ehandle(Object(Laminas\Diactoros\ServerRequest))\n#20 \/home\/USERNAME\/public_html\/vendor\/laminas\/laminas-stratigility\/src\/Next.php(51): Flarum\Http\Middleware\SetLocale-\u003Eprocess(Object(Laminas\Diactoros\ServerRequest), Object(Laminas\Stratigility\Next))\n#21 \/home\/USERNAME\/public_html\/vendor\/flarum\/core\/src\/Http\/Middleware\/AuthenticateWithHeader.php(56): Laminas\Stratigility\Next-\u003Ehandle(Object(Laminas\Diactoros\ServerRequest))\n#22 \/home\/USERNAME\/public_html\/vendor\/laminas\/laminas-stratigility\/src\/Next.php(51): Flarum\Http\Middleware\AuthenticateWithHeader-\u003Eprocess(Object(Laminas\Diactoros\ServerRequest), Object(Laminas\Stratigility\Next))\n#23 \/home\/USERNAME\/public_html\/vendor\/flarum\/core\/src\/Http\/Middleware\/AuthenticateWithSession.php(31): Laminas\Stratigility\Next-\u003Ehandle(Object(Laminas\Diactoros\ServerRequest))\n#24 \/home\/USERNAME\/public_html\/vendor\/laminas\/laminas-stratigility\/src\/Next.php(51): Flarum\Http\Middleware\AuthenticateWithSession-\u003Eprocess(Object(Laminas\Diactoros\ServerRequest), Object(Laminas\Stratigility\Next))\n#25 \/home\/USERNAME\/public_html\/vendor\/flarum\/core\/src\/Http\/Middleware\/RememberFromCookie.php(52): Laminas\Stratigility\Next-\u003Ehandle(Object(Laminas\Diactoros\ServerRequest))\n#26 \/home\/USERNAME\/public_html\/vendor\/laminas\/laminas-stratigility\/src\/Next.php(51): Flarum\Http\Middleware\RememberFromCookie-\u003Eprocess(Object(Laminas\Diactoros\ServerRequest), Object(Laminas\Stratigility\Next))\n#27 \/home\/USERNAME\/public_html\/vendor\/flarum\/core\/src\/Http\/Middleware\/StartSession.php(61): Laminas\Stratigility\Next-\u003Ehandle(Object(Laminas\Diactoros\ServerRequest))\n#28 \/home\/USERNAME\/public_html\/vendor\/laminas\/laminas-stratigility\/src\/Next.php(51): Flarum\Http\Middleware\StartSession-\u003Eprocess(Object(Laminas\Diactoros\ServerRequest), Object(Laminas\Stratigility\Next))\n#29 \/home\/USERNAME\/public_html\/vendor\/flarum\/core\/src\/Api\/Middleware\/FakeHttpMethods.php(29): Laminas\Stratigility\Next-\u003Ehandle(Object(Laminas\Diactoros\ServerRequest))\n#30 \/home\/USERNAME\/public_html\/vendor\/laminas\/laminas-stratigility\/src\/Next.php(51): Flarum\Api\Middleware\FakeHttpMethods-\u003Eprocess(Object(Laminas\Diactoros\ServerRequest), Object(Laminas\Stratigility\Next))\n#31 \/home\/USERNAME\/public_html\/vendor\/flarum\/core\/src\/Http\/Middleware\/ParseJsonBody.php(28): Laminas\Stratigility\Next-\u003Ehandle(Object(Laminas\Diactoros\ServerRequest))\n#32 \/home\/USERNAME\/public_html\/vendor\/laminas\/laminas-stratigility\/src\/Next.php(51): Flarum\Http\Middleware\ParseJsonBody-\u003Eprocess(Object(Laminas\Diactoros\ServerRequest), Object(Laminas\Stratigility\Next))\n#33 \/home\/USERNAME\/public_html\/vendor\/flarum\/core\/src\/Http\/Middleware\/HandleErrors.php(57): Laminas\Stratigility\Next-\u003Ehandle(Object(Laminas\Diactoros\ServerRequest))\n#34 \/home\/USERNAME\/public_html\/vendor\/laminas\/laminas-stratigility\/src\/Next.php(51): Flarum\Http\Middleware\HandleErrors-\u003Eprocess(Object(Laminas\Diactoros\ServerRequest), Object(Laminas\Stratigility\Next))\n#35 \/home\/USERNAME\/public_html\/vendor\/flarum\/core\/src\/Http\/Middleware\/InjectActorReference.php(25): Laminas\Stratigility\Next-\u003Ehandle(Object(Laminas\Diactoros\ServerRequest))\n#36 \/home\/USERNAME\/public_html\/vendor\/laminas\/laminas-stratigility\/src\/Next.php(51): Flarum\Http\Middleware\InjectActorReference-\u003Eprocess(Object(Laminas\Diactoros\ServerRequest), Object(Laminas\Stratigility\Next))\n#37 \/home\/USERNAME\/public_html\/vendor\/laminas\/laminas-stratigility\/src\/MiddlewarePipe.php(76): Laminas\Stratigility\Next-\u003Ehandle(Object(Laminas\Diactoros\ServerRequest))\n#38 \/home\/USERNAME\/public_html\/vendor\/middlewares\/request-handler\/src\/RequestHandler.php(84): Laminas\Stratigility\MiddlewarePipe-\u003Eprocess(Object(Laminas\Diactoros\ServerRequest), Object(Laminas\Stratigility\Next))\n#39 \/home\/USERNAME\/public_html\/vendor\/laminas\/laminas-stratigility\/src\/Next.php(51): Middlewares\RequestHandler-\u003Eprocess(Object(Laminas\Diactoros\ServerRequest), Object(Laminas\Stratigility\Next))\n#40 \/home\/USERNAME\/public_html\/vendor\/middlewares\/base-path-router\/src\/BasePathRouter.php(101): Laminas\Stratigility\Next-\u003Ehandle(Object(Laminas\Diactoros\ServerRequest))\n#41 \/home\/USERNAME\/public_html\/vendor\/laminas\/laminas-stratigility\/src\/Next.php(51): Middlewares\BasePathRouter-\u003Eprocess(Object(Laminas\Diactoros\ServerRequest), Object(Laminas\Stratigility\Next))\n#42 \/home\/USERNAME\/public_html\/vendor\/laminas\/laminas-stratigility\/src\/Middleware\/OriginalMessages.php(36): Laminas\Stratigility\Next-\u003Ehandle(Object(Laminas\Diactoros\ServerRequest))\n#43 \/home\/USERNAME\/public_html\/vendor\/laminas\/laminas-stratigility\/src\/Next.php(51): Laminas\Stratigility\Middleware\OriginalMessages-\u003Eprocess(Object(Laminas\Diactoros\ServerRequest), Object(Laminas\Stratigility\Next))\n#44 \/home\/USERNAME\/public_html\/vendor\/middlewares\/base-path\/src\/BasePath.php(73): Laminas\Stratigility\Next-\u003Ehandle(Object(Laminas\Diactoros\ServerRequest))\n#45 \/home\/USERNAME\/public_html\/vendor\/laminas\/laminas-stratigility\/src\/Next.php(51): Middlewares\BasePath-\u003Eprocess(Object(Laminas\Diactoros\ServerRequest), Object(Laminas\Stratigility\Next))\n#46 \/home\/USERNAME\/public_html\/vendor\/flarum\/core\/src\/Http\/Middleware\/ProcessIp.php(24): Laminas\Stratigility\Next-\u003Ehandle(Object(Laminas\Diactoros\ServerRequest))\n#47 \/home\/USERNAME\/public_html\/vendor\/laminas\/laminas-stratigility\/src\/Next.php(51): Flarum\Http\Middleware\ProcessIp-\u003Eprocess(Object(Laminas\Diactoros\ServerRequest), Object(Laminas\Stratigility\Next))\n#48 \/home\/USERNAME\/public_html\/vendor\/laminas\/laminas-stratigility\/src\/MiddlewarePipe.php(76): Laminas\Stratigility\Next-\u003Ehandle(Object(Laminas\Diactoros\ServerRequest))\n#49 \/home\/USERNAME\/public_html\/vendor\/laminas\/laminas-stratigility\/src\/MiddlewarePipe.php(65): Laminas\Stratigility\MiddlewarePipe-\u003Eprocess(Object(Laminas\Diactoros\ServerRequest), Object(Laminas\Stratigility\EmptyPipelineHandler))\n#50 \/home\/USERNAME\/public_html\/vendor\/laminas\/laminas-httphandlerrunner\/src\/RequestHandlerRunner.php(96): Laminas\Stratigility\MiddlewarePipe-\u003Ehandle(Object(Laminas\Diactoros\ServerRequest))\n#51 \/home\/USERNAME\/public_html\/vendor\/flarum\/core\/src\/Http\/Server.php(44): Laminas\HttpHandlerRunner\RequestHandlerRunner-\u003Erun()\n#52 \/home\/USERNAME\/public_html\/index.php(26): Flarum\Http\Server-\u003Elisten()\n#53 {main}"}]}

[deleted]

r4nchy Hmm - wait - the error "status":"403","code":"permission_denied" is also generated if you are posting via the API and the user selected is not admin.

Are you posting via the API, and does the user account you are using have admin rights ?

Braden

xasharma

Braden My hosting provider has also a lightspeed Web server

Sometimes it also shows Resource loading failed

Braden

xasharma How about a successful downgrade, were you able to do it? With two case now it seems very likely there is a bug on latest version, let us be patient , will be solved☕

xasharma

Braden I don't know the clear commands to downgrade.

GreXXL

Braden downgrading is not something we recommend. There is no known issue of this kind in the latest stable release (1.0.4). I assume this is specific to your setup. You can try reproducing the issue here: https://demo.flarum.site/

Braden

xasharma Hacksnation by now is a very professional Flarum site and one week without taking control, why don't you dazzle and maybe start a new BOUNTY 😃 Other day you seen how backend guru's solved a 3year problem in just seconds, a single Tap and he was using a mobile phone while in copenhagen metro.

xasharma

GreXXL

@"Justoverclock"#p178605

try running:

Composer update
Php Flarum migrate
Php Flarum cache clear

I thought flarum 1.0.4 is the latest version and it will not upadate further with these commands. But it is upgraded to 1.0.5 - dev version.

SychO

xasharma I thought flarum 1.0.4 is the latest version and it will not upadate further with these commands. But it is upgraded to 1.0.5 - dev version.

It doesn't unless you have done something to your composer.json configuration.

xasharma

Braden

Yes, I will try it when I have some amount of money 😅

xasharma

SychO

Justoverclock

Ohh ... I had added "minimum-stability": "dev", to composer.json 10-15 days ago and I forgot to remove it.

Can I remove it now?
What should can I do now?

Justoverclock

your composer.json have some access to the dev repository maybe.

askvortsov

xasharma yep, remove it and run the commands again.

xasharma

askvortsov

Thank you very much .. downgraded successfully.

r4nchy

The original issue has now been solved, I contacted the hosting company and they confirmed there was some issue related to ModSecurity

Here is what they said

and about the second issue that I wasn't able to post via API had user permission issues as pointed out by phenomlab

Braden

r4nchy Just wonderful 😊👌. This topic its now solved