# API Rest : Product modify give 403

**URL:** <https://www.dolibarr.org/forum/t/api-rest-product-modify-give-403/16327>\
**Category:** Using my Dolibarr\
**Created:** [January 15, 2018, 11:27am UTC](https://www.dolibarr.org/forum/t/api-rest-product-modify-give-403/16327 "2018-01-15T11:27:55Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![telemak](https://www.dolibarr.org/forum/letter_avatar_proxy/v4/letter/t/77aa72/32.png) [@telemak](https://www.dolibarr.org/forum/u/telemak)\
**Post date:** [January 15, 2018, 11:27am UTC](https://www.dolibarr.org/forum/t/api-rest-product-modify-give-403/16327/1 "2018-01-15T11:27:55Z")

</div>

## Hi, I’v all rights but when using rest api to modify a product, it give me a 403 (other rest command like create are ok). Test realised with API explorer and with my software : same result. Seem there’s a bug.

Forbidden

You don’t have permission to access /api/index.php/products/3  
on this server.

Additionally, a 403 Forbidden  
error was encountered while trying to use an ErrorDocument to handle the request.

Regards

Telemak

---

<div class="post-metadata">

**Author:** ![telemak](https://www.dolibarr.org/forum/letter_avatar_proxy/v4/letter/t/77aa72/32.png) [@telemak](https://www.dolibarr.org/forum/u/telemak)\
**Post date:** [January 15, 2018, 1:39pm UTC](https://www.dolibarr.org/forum/t/api-rest-product-modify-give-403/16327/2 "2018-01-15T13:39:11Z")

</div>

After testing, it appears that all “PUT” actions are in error with Fordibben message. The problem in not in the product class, but before in the treatment.

---

<div class="post-metadata">

**Author:** ![telemak](https://www.dolibarr.org/forum/letter_avatar_proxy/v4/letter/t/77aa72/32.png) [@telemak](https://www.dolibarr.org/forum/u/telemak)\
**Post date:** [January 15, 2018, 2:00pm UTC](https://www.dolibarr.org/forum/t/api-rest-product-modify-give-403/16327/3 "2018-01-15T14:00:41Z")

</div>

It’s related to Apache conf in directadmin, which not allow PUT/DELETE by default.

Just add this in CUSTOM3 in customconf :  
\<Limit GET POST PUT DELETE OPTIONS PROPFIND\>  
Order allow,deny  
Allow from all  
\</Limit\>  
\<LimitExcept GET POST PUT DELETE OPTIONS PROPFIND\>  
Order deny,allow  
Deny from all  
\</LimitExcept\>