Creating a new user. Error 403 (Version 7.5.1)

[alexisc]

Version 7.5.1
PHP 8.0.29
MySQL 5.7.42-46

I can't create a new user.

Error 403: Access denied
Can't relate with non-existing Contact record.

[Kharg]

can you check your logs??

[alexisc]

can you check your logs??

There is nothing in the logs, only a pop-up error message

[lazovic]

Hi alexisc,

Please tell me are there any unofficial extensions installed in your instance?

[alexisc]

no, only the official Advanced Pack

[alexisc]

browser shows an error:

Failed to load resource: the server responded with a status of 403 ()
espo.js:12946 CRM/api/v1/User

Server side error 403: Can't relate with non-existing record.

[esforim]

Did you do anything recently? Or is this first time install?

[SignIn]

HI, I have a same problem after update. Not just to create a user, but to create/update any record. Nothing in logs. Any ideas?

Apache:
Apache/2.4.54
PHP:
8.2.7
MySQL:
10.3.37-MariaDB

[alexisc]

Did you do anything recently? Or is this first time install?

no, I haven’t changed anything, I update it regularly, I’ve been using it for several years
I tried to roll back to the previous version, it doesn’t work on version 7.4 either (I don’t register users so often and didn’t immediately notice the problem)

[esforim]

Don't know to be honest, in case like this I would try a few location here:

1) Check any formula
2) Do the usually rebuild and clear cache
3) Rename/remove custom folder see if it help
4) Try edit some other user see if it error too or just create
5) Try give admin access to another user and try with that account.
6) I heard API can also create user? try that as well.

Perhaps trying some of these may narrow down

[item]

Error 403: Access denied
Can't relate with non-existing Contact record.

this is a "portal user", only portalUser is related to a Contact.. not a regular/admin User

we can only "help so" with nothing relevant information

[Akemi]

As from 7.4 you can do a hard rebuild in CLI, have you tried that?

[esforim]

Yes and this one too, I forgot to write.

[Jakub Grufik]

alexisc could you share the formula of the user entity, please?

And if you have some workflows that are being triggered by creating the user you could share it here as well

[alexisc]

1) Check any formula
- formulas work: no problem

2) Do the usually rebuild and clear cache
- done, no errors, does not help

3) Rename/remove custom folder see if it help
- done, does not help

4) Try edit some other user see if it error too or just create
- I can edit an existing user without problems, my workaround is I create a user using BPM and then edit..

5) Try give admin access to another user and try with that account.
- did, another admin gets the same error

6) I heard API can also create user? try that as well.
- no need, create with BPM...

7)this is a "portal user", only portalUser is related to a Contact
- the problem is related to the creation of a portal user, it is not possible to create a portal user even if it is associated with a contact. Connecting to a contact does not solve the problem.

8)As from 7.4 you can do a hard rebuild in CLI, have you tried that?
- I'll try and post here

9)And if you have some workflows that are being triggered by creating the user you could share it here as well
- no such workflows

[esforim]

Well I'm out of idea. This is where the Pro above can help and where it is the end of any of my idea.

[alexisc]

As from 7.4 you can do a hard rebuild in CLI, have you tried that?

it didn't solve the problem

[victor]

Have you tried granting the necessary permissions again: https://docs.espocrm.com/administrat...n/#permissions? Sometimes they are lost when upgrading. In case of any 403 errors on my instances, first of all, I always rewrite permissions.

[macistda]

permissions may be lost e.g. if you use php with nginx because the user / group defined by php (Upgrade) is www-data:www-data and not nginx:nginx or php-temp folder permissions are reset and you have to get them back to your webserver.

But there must be a logfile showing this error, without that it is just a guess.

[yuri]

Permission issues VERY unlikely to cause such issues.

[alexisc]

Have you tried granting the necessary permissions again: https://docs.espocrm.com/administrat...n/#permissions? Sometimes they are lost when upgrading. In case of any 403 errors on my instances, first of all, I always rewrite permissions.

checked, everything matches the requirements, but the error remains

[victor]

Please show the formulas you use in the entity User. Also show the Workflows and BPMs in which this entity participates.