Help - Possible Permission Issue - Adding Task / Removing or Modifying Column --- SOLVED

Installation Issues
1

Hi,

I’m having an issue. I seem to have installed Kanboard correctly and it seems to be up and running. I can add plugins via the plugin menu. I can create new projects. I’ve added SMTP support and it’s working. However, I can’t seem to add a TASK or EDIT/REMOVE columns.

If I click on the + and check with Chrome’s Developer Tools/Console. It seems to be a 403 error, more specifically:

VM144:1 GET https://kb.example.com/?controller=TaskCreationController&action=show&project_id=2&column_id=5&swimlane_id=4 403 (Forbidden)
(anonymous) @ VM144:1
execute @ app.min.js?1566681433:38
KB.http.get @ app.min.js?1566681433:38
open @ app.min.js?1566681433:54
(anonymous) @ app.min.js?1566681433:152
onClick @ app.min.js?1566681433:19

Same thing happens if I try to edit/delete a column:

VM116:1 GET https://kb.example.com/?controller=ColumnController&action=confirm&project_id=2&column_id=5 403 (Forbidden)

Any thoughts? I thought it may be a permission issue. I’m not sure.

Thanks in advance…

Shawn

2

Anyone have any idea of what I can do to fix this?

3

403 forbidden, pretty much sums it up. I’d start by looking at your server configuration.

1 Like
4

UPDATE ---- It was an issue with mod_security

I disabled it.

1 Like
5

Hello,

I’m having exactly the same trouble. But I have no idea where I can disable mod_security and what is it?

EDIT : Ok finally I found out how to disable the server firewall for this site and after some times it fixes the problem.

For the task addition action, I found that the URL crash only if there was the column_id parameter. For swimlane_id and project_id parameter there was no 403 error.

6

Ok I found out how to disable mod_security (the server firewall). But this doesn’t fix my issue.

I get a 403 error when I clicked on adding a new task from the cross in the upper corner of a column : https://kb.example.fr/?controller=TaskCreationController&action=show&project_id=10&column_id=33&swimlane_id=17 return a 403 error

I can add task from the menu so I test several combination of request and I found that parameter &column_id=XX cause the server to return 403 ! Otherwise, swimlane_id and project_id alone or together works fine.

I’m using the latest kanboard :

Version : 1.2.15
PHP : 7.3.18
PHP SAPI : cgi-fcgi
Client HTTP : cURL
OS version : Linux 4.14.154-ovh-vps-grsec-zfs-classid
Database type : sqlite
Database version : 3.28.0
Browser : Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0

Same with Firefox on linux or Chromium

1 Like