Diagnosing '403 Forbidden' Errors (Doc ID 2040276.1)

Last updated on MAY 29, 2023

Applies to:

Purpose

 When a '403 Forbidden' Error (which, depending on your browser, may also display as something similar to You don't have permission to access /commerce/buyside/document.jsp on this server) is returned from an Oracle CPQ Cloud Site, it can be confusing for the user or cause exceptions to occur in integrating systems. Here are some ways that the error can be diagnosed, which then leads to correcting the problem data.

This error is usually associated with what is called Mod Security. Mod Security are rules built into Oracle CPQ Cloud in order to prevent a wide variety of common attacks to protect your site and data from malicious activity. Occasionally, the rules will prevent normal use of the site by Sales Users or the saving of BML functions.

Troubleshooting Steps

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.