403 Forbidden issue trying to add or delete some Failures that are logged

[claysondesign]

For some failures I get a 403 forbidden issue trying to "add as redirect" or "delete" on live server

Steps to reproduce

• Plugin looks otherwise to be working normal and logging
• Add and Delete works for some Failures but not others
• Permissions for config and log.sqlite seem ok
• There doesn't seem to be a pattern with any of the failures, if they have a referrer or not, etc

Expected behavior

• Side panel should be revealed always, not just for some failures that are logged

Additional context

• Using the "above root" secure file setup for Kirby

Context

• Browser: Safari 18.4
• Kirby version: 4.7
• Retour version: 5.5.0
• Retour config: Defaults
• PHP 8.3.16
• Apache Server

[distantnative]

I will try to replicate this - I fear without further info and/or being able to reproduce it, it will be hard to fix this issue.

[claysondesign]

Thanks. I can't see a pattern here. Please suggest anything I can try.

[claysondesign]

The main difference I can see is that the Failures that allow me to either Delete or Add a Redirect do not involve changing the url, ones that don't change the url

Failures List default, including being able to invoke side Panel:
/panel/retour/failures?p=panel%2Fretour%2Ffailures

Example of getting a forbidden message:
panel/drawers/retour/failures/news%1Dfeed.rss/resolve

[distantnative]

@claysondesign

do not involve changing the url, ones that don't change the url

I cannot follow quite what you're saying here. Could you give an example what a failure would be that involves changing a URL? Thanks!