[Flow] ajax update object get 403 error

[Rémy DANIEL]

Hi

Normaly, session cookie is sent over ajax too.
You should look at the Flow security log in
Data/Logs/Security_Development.log for more information about this 403.
Maybe it is also related to CSRF protection.

Regards


--
Rémy

2015-02-04 8:19 GMT+01:00 Rocky <rockysynergy at gmail.com>:

> Hey,
>
> I am trying to use ajax to update the Entity object. The endpoint of the
> ajax request is granted for users who has role "Editor".  The button which
> triggers the ajax call is show after the "Editor" is logged in. After I
> clicked the button, I got below error in Chrome's inspector panel:
> "POST http://flow-learn.local/my.package/object/update 403 (Forbidden)"
>
> I think the ajax request does not carry the authentication information.
> Any help please?
> _______________________________________________
> Flow mailing list
> Flow at lists.typo3.org
> http://lists.typo3.org/cgi-bin/mailman/listinfo/flow
>