# Forbidden pop up on each action

**URL:** <https://discuss.tryton.org/t/forbidden-pop-up-on-each-action/4968>\
**Category:** System Administrator\
**Created:** [January 29, 2022, 8:56am UTC](https://discuss.tryton.org/t/forbidden-pop-up-on-each-action/4968 "2022-01-29T08:56:56Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![Van](https://discuss-cdn.tryton.org/letter_avatar_proxy/v4/letter/v/13edae/32.png) [@Van](https://discuss.tryton.org/u/Van)\
**Post date:** [January 29, 2022, 8:56am UTC](https://discuss.tryton.org/t/forbidden-pop-up-on-each-action/4968/1 "2022-01-29T08:56:56Z")

</div>

I install tryton and it web client, now I’m having issue with it. Each time I click on a menu, a have a pop up with a applicative forbidden error. But the action is still executed.

---

<div class="post-metadata">

**Author:** ![ced](https://discuss-cdn.tryton.org/user_avatar/discuss.tryton.org/ced/32/1237_2.png) [@ced](https://discuss.tryton.org/u/ced)\
**Post date:** [January 29, 2022, 9:02am UTC](https://discuss.tryton.org/t/forbidden-pop-up-on-each-action/4968/2 "2022-01-29T09:02:58Z")

</div>

You should look at the browser console and find the query that returns `403 Forbidden`.

---

<div class="post-metadata">

**Author:** ![Van](https://discuss-cdn.tryton.org/letter_avatar_proxy/v4/letter/v/13edae/32.png) [@Van](https://discuss.tryton.org/u/Van)\
**Post date:** [January 29, 2022, 9:32am UTC](https://discuss.tryton.org/t/forbidden-pop-up-on-each-action/4968/3 "2022-01-29T09:32:12Z")

</div>

this is what i get from console

 ![Screenshot from 2022-01-29 09-31-17](https://discuss-cdn.tryton.org/uploads/default/original/2X/2/299252b88978e10d6ebbe58bf7dc27d32da8a0d7.png)

---

<div class="post-metadata">

**Author:** ![ced](https://discuss-cdn.tryton.org/user_avatar/discuss.tryton.org/ced/32/1237_2.png) [@ced](https://discuss.tryton.org/u/ced)\
**Post date:** [January 29, 2022, 9:35am UTC](https://discuss.tryton.org/t/forbidden-pop-up-on-each-action/4968/4 "2022-01-29T09:35:09Z")

</div>

It is the network requests that should be interesting.

---

<div class="post-metadata">

**Author:** ![Van](https://discuss-cdn.tryton.org/letter_avatar_proxy/v4/letter/v/13edae/32.png) [@Van](https://discuss.tryton.org/u/Van)\
**Post date:** [January 29, 2022, 9:38am UTC](https://discuss.tryton.org/t/forbidden-pop-up-on-each-action/4968/5 "2022-01-29T09:38:20Z")

</div>

![2](https://discuss-cdn.tryton.org/uploads/default/original/2X/e/e882b6f6633c4e3df6dd3c0043a2dd43d209c3da.png)

that’s what i get

---

<div class="post-metadata">

**Author:** ![Van](https://discuss-cdn.tryton.org/letter_avatar_proxy/v4/letter/v/13edae/32.png) [@Van](https://discuss.tryton.org/u/Van)\
**Post date:** [January 29, 2022, 10:10am UTC](https://discuss.tryton.org/t/forbidden-pop-up-on-each-action/4968/6 "2022-01-29T10:10:48Z")

</div>

```auto
POST
	

Status
403
FORBIDDEN
VersionHTTP/1.0
Transferred382 B (234 B size)
Referrer Policystrict-origin-when-cross-origin

	
Content-Length
	234
Content-Type
	text/html
Date
	Sat, 29 Jan 2022 10:05:46 GMT
Server
	Werkzeug/0.16.0 Python/3.8.10
	
Accept
	application/json, text/javascript, */*; q=0.01
Accept-Encoding
	gzip, deflate
Accept-Language
	en-US,en;q=0.5
Authorization
	Session YWRtaW46MTo4ZTUxMmEyMWU1NTk4ZGVlODBjNjNkZTMwYjM2MTM5ODcxMjRkNDU0YjIyMWJlYmI4MjhiYzM0NzQ2ZGQxNmY2
Connection
	keep-alive
Content-Length
	342
Content-Type
	application/json
Host
	localhost:8000
Origin
	http://localhost:8000
Referer
	http://localhost:8000/
Sec-Fetch-Dest
	empty
Sec-Fetch-Mode
	cors
Sec-Fetch-Site
	same-origin
User-Agent
	Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
X-Requested-With
	XMLHttpRequest

```

---

<div class="post-metadata">

**Author:** ![ced](https://discuss-cdn.tryton.org/user_avatar/discuss.tryton.org/ced/32/1237_2.png) [@ced](https://discuss.tryton.org/u/ced)\
**Post date:** [January 29, 2022, 1:27pm UTC](https://discuss.tryton.org/t/forbidden-pop-up-on-each-action/4968/7 "2022-01-29T13:27:42Z")

</div>

I suspect that you are not using a compatible web client with the server. They must be from the same series (e.g. 6.2.x).

---

<div class="post-metadata">

**Author:** ![Van](https://discuss-cdn.tryton.org/letter_avatar_proxy/v4/letter/v/13edae/32.png) [@Van](https://discuss.tryton.org/u/Van)\
**Post date:** [February 1, 2022, 3:28pm UTC](https://discuss.tryton.org/t/forbidden-pop-up-on-each-action/4968/8 "2022-02-01T15:28:23Z")

</div>

thanks that was the issue, i changed it and it worked.

---

<div class="post-metadata">

**Author:** ![system](https://discuss-cdn.tryton.org/uploads/default/original/1X/c6f8ec0a40525cdcd50058c734283450a4b3d38b.png) [@system](https://discuss.tryton.org/u/system)\
**Post date:** [March 3, 2022, 3:29pm UTC](https://discuss.tryton.org/t/forbidden-pop-up-on-each-action/4968/9 "2022-03-03T15:29:16Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.