Skip to content
Grav 2.1 is out: every page speaks Markdown. Read the announcement →

You don't have permission to access /admin/notifications.json/task

Started by Muut Archive 10 years ago · 5 replies · 1999 views
10 years ago

Testing Grav on new server and ran into message below every time any admin page is accessed.
The message appears as red modal and then disappears:

TXT
403 Forbidden

Forbidden
You don't have permission to access /admin/notifications.json/task:processNotifications
on this server.

Have not used Grav enough to understand what file and permissions to look for.

Thanks in advanced for any input.

Terry

10 years ago

Thanks @flaviocopes. Thought I had specified CentOS, my bad.

You got me on the right track with mod_security now just have to drill down to solve issue.

Thanks again.

TXT

[Sun Feb 26 09:14:04 2017] [error] [client 47.184.XX.XX] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/local/apache/modsecurity-owasp-latest/rules/RESPONSE-980-CORRELA TION.conf"] [line "73"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=5,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): XSS Filter - Category 5: Disallowed HTML Attributes"] [tag "event-correlation"] [hostname "xxxxxxxxxxx.com"] [uri "/admin/notifications.json/task:processNotifications"] [unique_id "WLLwvH8AAAEAAExsyAoAAAAF"]
---
10 years ago

Need to find out if we can avoid triggering this problem in the first place.

10 years ago

It will be a few days before I can get back to setting up Grav but when / if figured out will certainly share the solution:)

Suggested topics

Topic Participants Replies Views Activity
Archive · by Deleted User, 9 years ago
0 2280 9 years ago
Archive · by Muut Archive, 9 years ago
2 1496 9 years ago
Archive · by Muut Archive, 9 years ago
2 4745 9 years ago
Archive · by Muut Archive, 9 years ago
1 3557 9 years ago
Archive · by Muut Archive, 9 years ago
3 1621 9 years ago