I just inherited a site with K2, which I've never used before. I'm superuser, and when I login for the first time, I can delete K2 comment(s). The 2nd time I try, even after logging out/in, I get a 403/Forbidden, and since there's not a 403 page, it's followed by a 404.

The failure is on a POST to /administrator/index.php?option=com_k2&view=comments, but I don't see anything more helpful in the logs.

I have run Akeeba Admin to fix permissions.

Any clues on where to look?

Hello Andrew,

Make sure your K2 user and K2 user group have the appropriate permissions to modify comments on the frontend.

On the backend by default, since you are a Super User you won't have an issue.

Sorry, I should have directly said the problem is in the backend, but the URL is for /administrator.

I just checked, and K2 parameter permissions are all Allowed (Superuser). All system permissions are default from the install.

Taking for granted that the server setup is correct (sessions, caching etc)..

Have you altered the default permissions in any way?

Any custom extensions or security restrictions (blocking of certain URLs)?

Is this happening in any K2 sites, or is this your first?

Finally which version of Joomla! and K2 are you using?

First K2 site, I inherited it from the previous developer, who is not longer available for contact.

No permissions changes anywhere that I can see, no security addons.

J3.2.1, K2 v2.6.7

Can you try with the 2.6.8 DEV build? It fiixes several issues for Joomla! 3.2.1

getk2.org/assets/get/

Installed 2.6.8, no change, I still get a 403/Forbidden when trying to delete K2 comments from the backend.

I am sorry but I can replicate the issue.

I am using Joomla! 3.2.1 with the 2.6.8 DEV build. I can delete comments, log in and out and resume deleting and editing.

Are you using any other extensions as well? Are you sure this is not related to your server setup?

I don't think that it is a K2 problem, but a config issue somewhere. As I said, I inherited this site, so I'm not totally familiar with everything yet. I did install Akeeba Admin and ran Fix Permissions. I have also updated php.ini to clear a upload file size & missing /tmp declaration (/tmp was configured in Joomla). I've also checked .htaccess and it looks default with mod_rewrite enabled.

There are no updates to discover and no warnings left.

The error occurs when I'm at:
/administrator/index.php?option=com_k2&view=comments
then check a comment box, then Delete. The error log says the 403.shtml access was referred by:
/administrator/index.php?option=com_k2&view=comments

Extra components are Akeeba Admin & Backup, K2, Simple Image Gallery Pro & RS Form Pro. Unfortunately those are paid extensions & I don't have access to their memberships. I don't think RS Form Pro is used anywhere, but the gallery is heavily used.

I see a couple extra plugins, one for GoogleAnalytics and another for image display. Also JCK Editor.

The site is running a Rockettheme/Gantry template, which I'm quite familiar with.