# 'Disable 2FA' button showing despite being unable to do so

**URL:** https://meta.discourse.org/t/disable-2fa-button-showing-despite-being-unable-to-do-so/156185
**Category:** Bug
**Created:** [June 28, 2020, 5:25pm UTC](https://meta.discourse.org/t/disable-2fa-button-showing-despite-being-unable-to-do-so/156185 "2020-06-28T17:25:04Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![Zeemah](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/zeemah/32/252179_2.png) [@Zeemah](https://meta.discourse.org/u/Zeemah)
#### Post date: [June 28, 2020, 5:25pm UTC](https://meta.discourse.org/t/disable-2fa-button-showing-despite-being-unable-to-do-so/156185/1 "2020-06-28T17:25:04Z")

</div>

So, at `/admin/users/n` where a user has 2FA enabled, the button to remove it appears. As a moderator, I am unable to do so and it just shows:

```plaintext
You are not permitted to view the requested resource.

```

Preview:

Unsure why it’s stretched, here’s the link: [https://i.imgur.com/qrcoF8D.gifv](https://i.imgur.com/qrcoF8D.gifv)

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [June 28, 2020, 5:58pm UTC](https://meta.discourse.org/t/disable-2fa-button-showing-despite-being-unable-to-do-so/156185/2 "2020-06-28T17:58:16Z")

</div>

So the issue is being a moderator and not an admin? We should confirm this is intentional next week @dax

---

<div class="post-metadata">

### Author: ![riking](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/riking/32/170938_2.png) [@riking](https://meta.discourse.org/u/riking)
#### Post date: [July 7, 2020, 8:52pm UTC](https://meta.discourse.org/t/disable-2fa-button-showing-despite-being-unable-to-do-so/156185/10 "2020-07-07T20:52:15Z")

</div>

Fix merged 🙂

[https://github.com/discourse/discourse/pull/10144](https://github.com/discourse/discourse/pull/10144)

---

<div class="post-metadata">

### Author: ![riking](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/riking/32/170938_2.png) [@riking](https://meta.discourse.org/u/riking)
#### Post date: [July 7, 2020, 8:52pm UTC](https://meta.discourse.org/t/disable-2fa-button-showing-despite-being-unable-to-do-so/156185/11 "2020-07-07T20:52:18Z")

</div>


