Content
403 Forbidden - On only a subset of pages
Added by atom momo over 3 years ago
Hi,
I'm having the following issue, wondering if someone experienced something similar.
Most of OP is working fine, but getting an access denied on the Project Overview and Calendar pages. Some errors are also being generated when dragging items on the Gantt chart (it should be noted that despite the errors, the changes are effected).
Setup:
- Fresh install of OP11.3.4 running on vanilla Ubuntu 20.04 with Apache and PostgreSQL 10.17
- OP running behind a load balancer, using XFF on Apache2 to find originating IPs and whitelisting only a single IP address
- OP configuration using SSL terminating at OP
When loading the Project Overview page, the page is loaded as blank. Inspecting the page via Firefox shows the following errors. It seems that the errors are originating from api v3 requests.
XHR Get https://FQDM/api/v3/capabilities?pageSize=1000&filters=[{"principal":{"operator":"=","values":["3"]}}] 403 Forbidden
XHR Get https://FQDM/api/v3/grids?filters=[{"scope":{"operator":"=","values":["/projects/demo-project"]}}] 403 Forbidden
This is apache2.conf:
ProxyRequests Off
ProxyVia Off
<Proxy *>
Require all granted
</Proxy>
<Location />
<RequireAll>
Require all granted
Include whitelisted_ips
</RequireAll>
</Location>
Hosts file (/etc/hosts):
127.0.0.1 localhost
Unsuccessful solutions attempted:
- System reboot
sudo openproject configure
- Using both Firefox and Chrome
- Modifying the hosts file to have 127.0.0.1 point also to the FDQM
References:
https://community.openproject.org/projects/openproject/work_packages/33348/activity
https://community.openproject.org/projects/openproject/work_packages/29716/activity
Thanks for the help!