# 403 when setting publish\_to\_category topic timer after update

**URL:** https://meta.discourse.org/t/403-when-setting-publish-to-category-topic-timer-after-update/404164
**Category:** Bug
**Tags:** topic-timers, bug
**Created:** [May 31, 2026, 2:14pm UTC](https://meta.discourse.org/t/403-when-setting-publish-to-category-topic-timer-after-update/404164 "2026-05-31T14:14:47Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![davidkingham](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/davidkingham/32/119528_2.png) [@davidkingham](https://meta.discourse.org/u/davidkingham)
#### Post date: [May 31, 2026, 2:14pm UTC](https://meta.discourse.org/t/403-when-setting-publish-to-category-topic-timer-after-update/404164/1 "2026-05-31T14:14:48Z")

</div>

After a recent core update, one of our global moderators can no longer use Schedule Publishing / Publish to Category on a topic timer.

Workflow:

1. A topic is created in a private staging category.
2. That staging category is only visible to admins and a specific Weekly Challenge moderator group.
3. The affected user is a global moderator and is also in that Weekly Challenge moderator group.
4. The topic is scheduled to publish into our Image Critiques category.
5. The destination category allows Members to Create, and the affected moderator is included in that access path.
6. This workflow previously worked, but now fails with a 403.

This only appears to fail for the `publish_to_category` timer type. Other topic timer actions do not appear to fail in the same way.

Failed request:

```plaintext
POST /t/51041/timer

Request data:

time: 2026-05-31 07:52-04:00
status_type: publish_to_category
category_id: 87

```

Response:

`{`  
`“errors”: [“You are not permitted to view the requested resource.”],`  
`“error_type”: “invalid_access”`  
`}`

Additional notes:

- The user is a global moderator.
- The user is TL4.
- The user has access to the private staging category through the relevant group.
- The destination category allows Create for Members.
- Admins can set/change the same publishing date without issue.
- We do not have any custom plugins or theme components modifying this behavior.
- This started immediately after a core update.

Question:

Was there a recent authorization change around `publish_to_category` topic timers? Should a global moderator with access to the source category and create permission in the destination category still be able to schedule publishing, or is this now intended to be admin-only?

---

<div class="post-metadata">

### Author: ![Lilly](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/lilly/32/575047_2.png) [@Lilly](https://meta.discourse.org/u/Lilly)
#### Post date: [May 31, 2026, 5:17pm UTC](https://meta.discourse.org/t/403-when-setting-publish-to-category-topic-timer-after-update/404164/2 "2026-05-31T17:17:44Z")

</div>

> [@davidkingham](#):
>
> - The user is a global moderator.
> - The user is TL4.
> - The user has access to the private staging category through the relevant group.
> - The destination category allows Create for Members.
> - Admins can set/change the same publishing date without issue.

are you certain that the moderator in question has create/post access to the admin-staging category? if i’m following your logic - you’ve just said they are TL4 and have visible access, and that admins can set/or change the date.

---

<div class="post-metadata">

### Author: ![davidkingham](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/davidkingham/32/119528_2.png) [@davidkingham](https://meta.discourse.org/u/davidkingham)
#### Post date: [May 31, 2026, 11:07pm UTC](https://meta.discourse.org/t/403-when-setting-publish-to-category-topic-timer-after-update/404164/3 "2026-05-31T23:07:08Z")

</div>

Hi Lilly, yes I’m positive. He has been doing the same workflow for 6 months without issue and then this started a week or so after a rebuild.

---

<div class="post-metadata">

### Author: ![Lilly](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/lilly/32/575047_2.png) [@Lilly](https://meta.discourse.org/u/Lilly)
#### Post date: [May 31, 2026, 11:26pm UTC](https://meta.discourse.org/t/403-when-setting-publish-to-category-topic-timer-after-update/404164/4 "2026-05-31T23:26:45Z")

</div>

> [@davidkingham](#):
>
> week or so after a rebuild.

what admin activity happened between the rebuild and when this started? any category permission changes? if there was a week delay, then something in between may have changed it. or was it only a week later that the moderator tried? did you look in the staff log to see if any category or group permission changes occurred that could have affected this?

i also wonder if the recently enabled newfangled simplified category creation thing inadvertently affected some configurations 🤔

---

<div class="post-metadata">

### Author: ![davidkingham](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/davidkingham/32/119528_2.png) [@davidkingham](https://meta.discourse.org/u/davidkingham)
#### Post date: [June 4, 2026, 1:55am UTC](https://meta.discourse.org/t/403-when-setting-publish-to-category-topic-timer-after-update/404164/5 "2026-06-04T01:55:14Z")

</div>

I’m the only one that can change category settings and haven’t changed them for months.
