# Access forbidden on user

**URL:** <https://community.forestadmin.com/t/access-forbidden-on-user/2002>\
**Category:** Help me!\
**Created:** [March 3, 2021, 2:19pm UTC](https://community.forestadmin.com/t/access-forbidden-on-user/2002 "2021-03-03T14:19:15Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![Sharp](https://dub1.discourse-cdn.com/flex013/user_avatar/community.forestadmin.com/sharp/32/1694_2.png) [@Sharp](https://community.forestadmin.com/u/Sharp)\
**Post date:** [March 3, 2021, 2:19pm UTC](https://community.forestadmin.com/t/access-forbidden-on-user/2002/1 "2021-03-03T14:19:15Z")

</div>

Hello Forest Admin Team !  
Our production environment is down… 😕

We have had some problems with our dashboard for about 1 hour :

- Filtering on certain segments no longer works. All data are displayed.  

- There is some issues with a team layout :

 ![image](https://europe1.discourse-cdn.com/flex013/uploads/forest/original/2X/2/292d447878642ef757c661b54cb0e9926cab7df4.png)

 ![image](https://europe1.discourse-cdn.com/flex013/uploads/forest/original/2X/4/4ebcf18013ca95465131f6f46c1b04779cd49456.png)

Have you made any recent changes?

Thanks for your help !  
Camille - Psynergy

---

<div class="post-metadata">

**Author:** ![anon39848301](https://avatars.discourse-cdn.com/v4/letter/a/b9e5f3/32.png) [@anon39848301](https://community.forestadmin.com/u/anon39848301)\
**Post date:** [March 3, 2021, 2:26pm UTC](https://community.forestadmin.com/t/access-forbidden-on-user/2002/2 "2021-03-03T14:26:33Z")

</div>

Hi @Sharp,

Are you using the role feature? `browseEnabled` access forbidden looks like a permission issue.  
If that’s the case, could check if:

- All roles are correctly configured.
- All roles have access to the production environment.
- All users accessing the production environment have the correct role.

Let me know.

---

<div class="post-metadata">

**Author:** ![Sharp](https://dub1.discourse-cdn.com/flex013/user_avatar/community.forestadmin.com/sharp/32/1694_2.png) [@Sharp](https://community.forestadmin.com/u/Sharp)\
**Post date:** [March 3, 2021, 2:34pm UTC](https://community.forestadmin.com/t/access-forbidden-on-user/2002/3 "2021-03-03T14:34:14Z")

</div>

Hello @anon39848301

Nothing change on our side for 3 weeks.  
Where can I check if role have access to the production environment ? 🤔

---

<div class="post-metadata">

**Author:** ![anon39848301](https://avatars.discourse-cdn.com/v4/letter/a/b9e5f3/32.png) [@anon39848301](https://community.forestadmin.com/u/anon39848301)\
**Post date:** [March 3, 2021, 2:39pm UTC](https://community.forestadmin.com/t/access-forbidden-on-user/2002/4 "2021-03-03T14:39:35Z")

</div>

This should be visible from the “Role” screen in your project settings. A small switch should be displayed

---

<div class="post-metadata">

**Author:** ![Sharp](https://dub1.discourse-cdn.com/flex013/user_avatar/community.forestadmin.com/sharp/32/1694_2.png) [@Sharp](https://community.forestadmin.com/u/Sharp)\
**Post date:** [March 3, 2021, 2:41pm UTC](https://community.forestadmin.com/t/access-forbidden-on-user/2002/5 "2021-03-03T14:41:53Z")

</div>

There is no small switch 🤔

 ![image](https://europe1.discourse-cdn.com/flex013/uploads/forest/original/2X/6/673a7690dd2db70d508a4f38c617d4d73be0a5f2.png)

---

<div class="post-metadata">

**Author:** ![Sharp](https://dub1.discourse-cdn.com/flex013/user_avatar/community.forestadmin.com/sharp/32/1694_2.png) [@Sharp](https://community.forestadmin.com/u/Sharp)\
**Post date:** [March 3, 2021, 2:55pm UTC](https://community.forestadmin.com/t/access-forbidden-on-user/2002/6 "2021-03-03T14:55:55Z")

</div>

@anon39848301 It looks like roles permissions feature is active on your side but not on our.

Moreover segment configuration doesn’t persist anymore, I set “Repondu” to “false” but when I refresh selector is on “Select” choice

 ![image](https://europe1.discourse-cdn.com/flex013/uploads/forest/original/2X/e/e836f09bfd5e5878c2f77baf2f456fd4f8224050.png)

---

<div class="post-metadata">

**Author:** ![anon39848301](https://avatars.discourse-cdn.com/v4/letter/a/b9e5f3/32.png) [@anon39848301](https://community.forestadmin.com/u/anon39848301)\
**Post date:** [March 3, 2021, 3:01pm UTC](https://community.forestadmin.com/t/access-forbidden-on-user/2002/7 "2021-03-03T15:01:07Z")

</div>

No, that’s my fault - I did not check your project well enough.

This issue looks similar (See [Segment crashes depending on filter](https://community.forestadmin.com/t/segment-crashes-depending-on-filter/1895)), but on my end, I’m not able to reproduce either. I would suggest to follow what is stated there (Recreate the segment and migrate to v7).

Let me know if that helps

---

<div class="post-metadata">

**Author:** ![Sharp](https://dub1.discourse-cdn.com/flex013/user_avatar/community.forestadmin.com/sharp/32/1694_2.png) [@Sharp](https://community.forestadmin.com/u/Sharp)\
**Post date:** [March 3, 2021, 3:11pm UTC](https://community.forestadmin.com/t/access-forbidden-on-user/2002/8 "2021-03-03T15:11:17Z")

</div>

It’s weird, this morning everything was working perfectly.  
If nothing change on our side and on your side how can it can be broken ?  
And make a hotfix to upgrade to a major version is not safe… Is this the only solution ?

---

<div class="post-metadata">

**Author:** ![anon39848301](https://avatars.discourse-cdn.com/v4/letter/a/b9e5f3/32.png) [@anon39848301](https://community.forestadmin.com/u/anon39848301)\
**Post date:** [March 3, 2021, 3:16pm UTC](https://community.forestadmin.com/t/access-forbidden-on-user/2002/9 "2021-03-03T15:16:10Z")

</div>

I just ask the team member who filed/fixed the issue and he gave me more insight of a potential issue regarding this. I was suggesting to migrate to v7 since that was the proposed solution on the thread I mentionned, but I would also prefer to understand what causes this.

In order to check if there is an issue in your project configuration, could you share here an environment & a team where you are experiencing this issue?

---

<div class="post-metadata">

**Author:** ![Sharp](https://dub1.discourse-cdn.com/flex013/user_avatar/community.forestadmin.com/sharp/32/1694_2.png) [@Sharp](https://community.forestadmin.com/u/Sharp)\
**Post date:** [March 3, 2021, 3:19pm UTC](https://community.forestadmin.com/t/access-forbidden-on-user/2002/10 "2021-03-03T15:19:54Z")

</div>

Environnement : PRODUCTION  
Team : Psychologue  
(Do you need project name or you already have it ?)

---

<div class="post-metadata">

**Author:** ![anon39848301](https://avatars.discourse-cdn.com/v4/letter/a/b9e5f3/32.png) [@anon39848301](https://community.forestadmin.com/u/anon39848301)\
**Post date:** [March 3, 2021, 4:22pm UTC](https://community.forestadmin.com/t/access-forbidden-on-user/2002/11 "2021-03-03T16:22:44Z")

</div>

Hi @Sharp, I think I was, in fact, able to reproduce your issue.

It appear that you are using scopes on your user collections. The issue you mentionned was indeed introduced today, and the filters are not correctly sent to your backend, causing the `permissionMiddleware` to fail. I opened a ticket on our end, be sure we will keep you posted once fixed.

---

<div class="post-metadata">

**Author:** ![anon36130554](https://avatars.discourse-cdn.com/v4/letter/a/b3f665/32.png) [@anon36130554](https://community.forestadmin.com/u/anon36130554)\
**Post date:** [March 3, 2021, 4:30pm UTC](https://community.forestadmin.com/t/access-forbidden-on-user/2002/12 "2021-03-03T16:30:49Z")

</div>

Hello @Sharp 👋

May I ask you the content of the http call to `/user` which breaks please ?

You can get this information by opening your browser debug tool, then open the network tab and refresh the page. You should be able to see the broken call to `/user`.

Can you send me the payload sent in the request ?

Thanks in advance 🙂

Steve.

---

<div class="post-metadata">

**Author:** ![Sharp](https://dub1.discourse-cdn.com/flex013/user_avatar/community.forestadmin.com/sharp/32/1694_2.png) [@Sharp](https://community.forestadmin.com/u/Sharp)\
**Post date:** [March 3, 2021, 4:38pm UTC](https://community.forestadmin.com/t/access-forbidden-on-user/2002/13 "2021-03-03T16:38:20Z")

</div>

Hello @anon36130554 !

Query parameters :

 ![image](https://europe1.discourse-cdn.com/flex013/uploads/forest/original/2X/5/593ab2555ced255ce6ceca6bf0e5eb4643affea8.png)

And scope configuration is lost 🤔(It was filtering result rows on authenticated user email)

 ![image](https://europe1.discourse-cdn.com/flex013/uploads/forest/original/2X/d/d8bd0ac12ab861e7a4640d691127c662bc3cb8d7.png)

---

<div class="post-metadata">

**Author:** ![anon36130554](https://avatars.discourse-cdn.com/v4/letter/a/b3f665/32.png) [@anon36130554](https://community.forestadmin.com/u/anon36130554)\
**Post date:** [March 3, 2021, 4:52pm UTC](https://community.forestadmin.com/t/access-forbidden-on-user/2002/14 "2021-03-03T16:52:54Z")

</div>

Hello @Sharp 👋

Thanks a lot for the investigation. Please, do not touch your scope configuration, we still have it on our end.

We have figured out the issue and a fix is ongoing 👍

I will keep you in touch.

Steve.

---

<div class="post-metadata">

**Author:** ![anon36130554](https://avatars.discourse-cdn.com/v4/letter/a/b3f665/32.png) [@anon36130554](https://community.forestadmin.com/u/anon36130554)\
**Post date:** [March 3, 2021, 6:24pm UTC](https://community.forestadmin.com/t/access-forbidden-on-user/2002/15 "2021-03-03T18:24:20Z")

</div>

Hello @Sharp 👋

A fix has just been released, can you confirm things are back to normal please ?

I’m marking the thread as resolved, I will reopen it if an issue persists 🙌

Thanks for opening a thread in our community,

Steve.

---

<div class="post-metadata">

**Author:** ![Eyal\_Hakim](https://dub1.discourse-cdn.com/flex013/user_avatar/community.forestadmin.com/eyal_hakim/32/1151_2.png) [@Eyal\_Hakim](https://community.forestadmin.com/u/Eyal_Hakim)\
**Post date:** [March 3, 2021, 6:37pm UTC](https://community.forestadmin.com/t/access-forbidden-on-user/2002/16 "2021-03-03T18:37:33Z")

</div>

Hi @anon36130554, we had this issue as well and it is still ongoing for us. I can jump on a call if you’d like and show what we are experiencing.

---

<div class="post-metadata">

**Author:** ![anon36130554](https://avatars.discourse-cdn.com/v4/letter/a/b3f665/32.png) [@anon36130554](https://community.forestadmin.com/u/anon36130554)\
**Post date:** [March 3, 2021, 7:18pm UTC](https://community.forestadmin.com/t/access-forbidden-on-user/2002/17 "2021-03-03T19:18:03Z")

</div>

Hi @Eyal_Hakim indeed I can reproduce.

We are currently rollbacking to latest stable release regarding segments and scopes.

Sorry everyone for the inconvenience, we are working on fixing things ASAP.

I will keep you updated.

Steve.

---

<div class="post-metadata">

**Author:** ![anon36130554](https://avatars.discourse-cdn.com/v4/letter/a/b3f665/32.png) [@anon36130554](https://community.forestadmin.com/u/anon36130554)\
**Post date:** [March 3, 2021, 7:43pm UTC](https://community.forestadmin.com/t/access-forbidden-on-user/2002/18 "2021-03-03T19:43:12Z")

</div>

Hello everyone.

I would like to apologise for the inconvenience. It looks like the segments and scopes features are back to business.

Can you confirm that either segments, scopes, and access to collection are back to normal please ?

Thanks for the heads up, and once again sorry for the inconvenience.

Steve.

---

<div class="post-metadata">

**Author:** ![Eyal\_Hakim](https://dub1.discourse-cdn.com/flex013/user_avatar/community.forestadmin.com/eyal_hakim/32/1151_2.png) [@Eyal\_Hakim](https://community.forestadmin.com/u/Eyal_Hakim)\
**Post date:** [March 3, 2021, 7:59pm UTC](https://community.forestadmin.com/t/access-forbidden-on-user/2002/19 "2021-03-03T19:59:18Z")

</div>

Hi @anon36130554, I can confirm it’s working now. Thanks!

---

<div class="post-metadata">

**Author:** ![Sharp](https://dub1.discourse-cdn.com/flex013/user_avatar/community.forestadmin.com/sharp/32/1694_2.png) [@Sharp](https://community.forestadmin.com/u/Sharp)\
**Post date:** [March 4, 2021, 8:46am UTC](https://community.forestadmin.com/t/access-forbidden-on-user/2002/20 "2021-03-04T08:46:37Z")

</div>

Hello @anon36130554 and @anon39848301 👋

I also confirm that everything is back to normal.

Thank you for your reactivity 🙂
