# Admin unauthorized to view staging environment from different computers

**URL:** <https://community.forestadmin.com/t/admin-unauthorized-to-view-staging-environment-from-different-computers/7812>\
**Category:** Help me!\
**Tags:** dashboard\
**Created:** [February 6, 2025, 7:48am UTC](https://community.forestadmin.com/t/admin-unauthorized-to-view-staging-environment-from-different-computers/7812 "2025-02-06T07:48:25Z")\
**Posts on this page:** 10\
**Page:** 1

<div class="post-metadata">

**Author:** ![zigit\_zigit](https://dub1.discourse-cdn.com/flex013/user_avatar/community.forestadmin.com/zigit_zigit/32/3447_2.png) [@zigit\_zigit](https://community.forestadmin.com/u/zigit_zigit)\
**Post date:** [February 6, 2025, 7:48am UTC](https://community.forestadmin.com/t/admin-unauthorized-to-view-staging-environment-from-different-computers/7812/1 "2025-02-06T07:48:25Z")

</div>

## Feature(s) impacted

admin users cant view part of the envs

## Observed behavior

admin users cant view part of the envs from their computers, from others they can.

## Expected behavior

## Failure Logs

 ![WhatsApp Image 2025-02-06 at 09.22.22_2a85f930](https://europe1.discourse-cdn.com/flex013/uploads/forest/original/2X/5/5ba9d50b480fe07a3cfb5903d89388b3ed069056.jpeg)

## Context

- Project name: RebarAdmin
- Team name: Operations
- Environment name: Staging
- Agent technology: (nodejs, php, rails, python): nodejs
- Agent (forest package) name & version: 9.3.10
- Database type: sql
- Recent changes made on your end if any: none,

---

<div class="post-metadata">

**Author:** ![anon7284711](https://avatars.discourse-cdn.com/v4/letter/a/ac8455/32.png) [@anon7284711](https://community.forestadmin.com/u/anon7284711)\
**Post date:** [February 7, 2025, 2:48pm UTC](https://community.forestadmin.com/t/admin-unauthorized-to-view-staging-environment-from-different-computers/7812/2 "2025-02-07T14:48:44Z")

</div>

Hello @zigit_zigit,

Can you check the network for any errors when you are failing to reach your agent ?

---

<div class="post-metadata">

**Author:** ![zigit\_zigit](https://dub1.discourse-cdn.com/flex013/user_avatar/community.forestadmin.com/zigit_zigit/32/3447_2.png) [@zigit\_zigit](https://community.forestadmin.com/u/zigit_zigit)\
**Post date:** [February 9, 2025, 7:38am UTC](https://community.forestadmin.com/t/admin-unauthorized-to-view-staging-environment-from-different-computers/7812/3 "2025-02-09T07:38:48Z")

</div>

![WhatsApp Image 2025-02-09 at 09.27.36_1b7c020a](https://europe1.discourse-cdn.com/flex013/uploads/forest/optimized/2X/2/24539c6aa718cf9284f5620124cb53b150b24676_2_690x30.jpeg)

 ![WhatsApp Image 2025-02-09 at 09.30.47_d6bba1e7](https://europe1.discourse-cdn.com/flex013/uploads/forest/original/2X/d/d2706cb32ea3177aea9c512b2392d47897128ed8.jpeg)  
 ![WhatsApp Image 2025-02-09 at 09.34.10_97cb111b](https://europe1.discourse-cdn.com/flex013/uploads/forest/original/2X/7/78b543b3e59eb98585fce0e2ab53c98925848ddc.jpeg)

---

<div class="post-metadata">

**Author:** ![anon7284711](https://avatars.discourse-cdn.com/v4/letter/a/ac8455/32.png) [@anon7284711](https://community.forestadmin.com/u/anon7284711)\
**Post date:** [February 10, 2025, 10:06am UTC](https://community.forestadmin.com/t/admin-unauthorized-to-view-staging-environment-from-different-computers/7812/4 "2025-02-10T10:06:23Z")

</div>

Can you share the content of the CORS error on your authentication call ?

You could try as well to access it with private navigation and all extensions disabled to ensure it is not coming from the browser.

---

<div class="post-metadata">

**Author:** ![zigit\_zigit](https://dub1.discourse-cdn.com/flex013/user_avatar/community.forestadmin.com/zigit_zigit/32/3447_2.png) [@zigit\_zigit](https://community.forestadmin.com/u/zigit_zigit)\
**Post date:** [February 12, 2025, 10:45am UTC](https://community.forestadmin.com/t/admin-unauthorized-to-view-staging-environment-from-different-computers/7812/5 "2025-02-12T10:45:12Z")

</div>

still dont work, [https://europe1.discourse-cdn.com/flex013/uploads/forest/original/2X/7/78b543b3e59eb98585fce0e2ab53c98925848ddc.jpeg](https://europe1.discourse-cdn.com/flex013/uploads/forest/original/2X/7/78b543b3e59eb98585fce0e2ab53c98925848ddc.jpeg)

---

<div class="post-metadata">

**Author:** ![anon7284711](https://avatars.discourse-cdn.com/v4/letter/a/ac8455/32.png) [@anon7284711](https://community.forestadmin.com/u/anon7284711)\
**Post date:** [February 12, 2025, 5:09pm UTC](https://community.forestadmin.com/t/admin-unauthorized-to-view-staging-environment-from-different-computers/7812/6 "2025-02-12T17:09:28Z")

</div>

Hello @zigit_zigit,

As we can see that you have a 403 error in your network, I was able to trace it back on our monitoring, I would suspect that your users cannot reach your environments as they do not have 2FA enabled on their account while using email/password as authentication. And your staging environment requires 2FA to be accessible.

However you should have been prompted with a more explicit error modal. Do you confirm that this is the issue, in which case I would start investigating as to why the proper modal has not been displayed.

Best regards,

---

<div class="post-metadata">

**Author:** ![zigit\_zigit](https://dub1.discourse-cdn.com/flex013/user_avatar/community.forestadmin.com/zigit_zigit/32/3447_2.png) [@zigit\_zigit](https://community.forestadmin.com/u/zigit_zigit)\
**Post date:** [February 13, 2025, 8:37am UTC](https://community.forestadmin.com/t/admin-unauthorized-to-view-staging-environment-from-different-computers/7812/7 "2025-02-13T08:37:37Z")

</div>

In production, we have two-factor authentication (2FA) implemented, in the issue happen only in staging env so that not the problem

---

<div class="post-metadata">

**Author:** ![anon7284711](https://avatars.discourse-cdn.com/v4/letter/a/ac8455/32.png) [@anon7284711](https://community.forestadmin.com/u/anon7284711)\
**Post date:** [February 13, 2025, 10:56am UTC](https://community.forestadmin.com/t/admin-unauthorized-to-view-staging-environment-from-different-computers/7812/8 "2025-02-13T10:56:50Z")

</div>

Could you share with me the kind of 403 error that is being sent then ? Can you check for logs in your agent when your users receive this error.

From my side the only traces I can see are errors related to 2FA not being enabled and I observe 2 users using email/password without 2FA enabled on their account.

---

<div class="post-metadata">

**Author:** ![zigit\_zigit](https://dub1.discourse-cdn.com/flex013/user_avatar/community.forestadmin.com/zigit_zigit/32/3447_2.png) [@zigit\_zigit](https://community.forestadmin.com/u/zigit_zigit)\
**Post date:** [February 16, 2025, 8:22am UTC](https://community.forestadmin.com/t/admin-unauthorized-to-view-staging-environment-from-different-computers/7812/9 "2025-02-16T08:22:49Z")

</div>

which users you find?

---

<div class="post-metadata">

**Author:** ![anon7284711](https://avatars.discourse-cdn.com/v4/letter/a/ac8455/32.png) [@anon7284711](https://community.forestadmin.com/u/anon7284711)\
**Post date:** [February 17, 2025, 8:26am UTC](https://community.forestadmin.com/t/admin-unauthorized-to-view-staging-environment-from-different-computers/7812/10 "2025-02-17T08:26:52Z")

</div>

I see 2 accounts without 2FA enabled and using email/password:

- stav.d@
- amit@
