Show descriptive error message instead of generic 403 for unauthorised page actions

Created on 10 July 2025, 6 days ago

Overview

Currently, when a user with the Content Editor role attempts to perform unauthorized actions (such as creating, editing, duplicating, deleting, or renaming XB Pages)—for which they do not have the required permissions—the system displays a generic 403 error page. Instead, a more descriptive and user-friendly error message should be shown to clearly indicate the lack of permissions for the attempted action.

Steps to Reproduce

  1. Ensure the Content Editor role has the following permissions:
    • Assigned:
      • Create new Article
      • Edit any Article (even if admin-created)
    • Not assigned:
      • Edit XB Page
      • Create new Page
      • Duplicate Page
      • Delete Page
  2. Log in as a user with the Content Editor role.
  3. Attempt the following actions on XB Pages (for which the user does not have permission):
    • Visit XB Article node
    • Click on page navigation
  4. Result: A generic 403 error is displayed.

Proposed resolution

User interface changes

🐛 Bug report
Status

Active

Version

0.0

Component

… to be triaged

Created by

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Production build 0.71.5 2024