Question
Global
IN
Last activity: 30 Apr 2025 17:10 EDT
On click of button getting 403 Error- Forbidden Request in pega cloud 24.2 and working fine in 8.7
Hi All,
On click of button getting 403 Error- Forbidden Request in pega cloud 24.2 and working fine before migration in 8.7
On click of button actions are Run DT , Local Action , Refresh Current-Harness.
Note: No RBAC is present in the application
Pegasystems Inc.
IN
@MounikaR9405It could be because of Basic Access control (BAC) , Check for SECU0019 Alerts under the alert security logs when you are seeing 403 on the button click Please check for more details on the below documentation SECU0019 alert: Unauthorized request detected
HCA Healthcare
US
@MounikaR9405 In Pega Cloud 24.2, security has been tightened compared to 8.7, so a 403 Forbidden error typically means the system is blocking the request due to missing privileges or newer platform-level restrictions. Even if no explicit RBAC is configured, Pega 24.2 introduces stricter CSRF protection and client-side validations. This issue might happen if the action sequence (Run DT → Local Action → Refresh Harness) violates expected security headers or session validation rules. To fix it, try rearranging the actions—place "Refresh-Current Harness" after the Local Action completes. Also, check if the data transform or local action is calling any API or rule that’s now restricted due to newer platform settings. Review tracer and logs for exact failure points, and consult Pega’s security checklist for version 24.2.