### Author:  [@seeminglee](https://meta.discourse.org/u/seeminglee)
#### Post date: [November 6, 2020, 3:51am UTC](https://meta.discourse.org/t/getting-a-403-error-popup-when-trying-to-admin-users/169393/1 "2020-11-06T03:51:00Z")
I’ve just installed discourse on a new server. Things are going great but now I am getting a popup for `403 error` whenever I try to do perform admin tasks:
- editing user / granting moderator status
The errors in the console log are:
```plaintext
PUT https://discuss.royaleapi.com/admin/users/5/grant_moderation 403
SyntaxError: Unexpected token < in JSON at position 0
at Function.parse [as parseJSON] ()
Uncaught {jqXHR: {…}, textStatus: "error", errorThrown: "", _discourse_displayed: true}
```
Also, I am unable to log out for some reason. I have cleared my browser cache and login fresh but still clicking on the logout link does nothing.
For the log out issue I see this in my console:
```plaintext
includes.js?v=xxxxxxxxxx DELETE https://discuss.royaleapi.com/session/sml 403
ember_jquery-xxxxxxx.js:1 Uncaught {jqXHR: {…}, textStatus: "error", errorThrown: ""}
```
I’ve replaced some of the paths above because I was not sure they are keys or not
---
### Author:  [@seeminglee](https://meta.discourse.org/u/seeminglee)
#### Post date: [November 6, 2020, 7:51am UTC](https://meta.discourse.org/t/getting-a-403-error-popup-when-trying-to-admin-users/169393/2 "2020-11-06T07:51:40Z")
Update: I’ve solved this issue by setting Cloudflare to DNS only mode.
However, is there anyway to proxy over Cloudflare / any settings that would work? I guess I should follow these settings… [https://www.communiteq.com/kb/using-cloudflare/](https://www.communiteq.com/kb/using-cloudflare/)
---
### Author:  [@michaeld](https://meta.discourse.org/u/michaeld)
#### Post date: [November 6, 2020, 6:44pm UTC](https://meta.discourse.org/t/getting-a-403-error-popup-when-trying-to-admin-users/169393/3 "2020-11-06T18:44:28Z")
That document is specifically for clients hosting with us, not a general recommendation for self hosted instances.
As a rule of thumb I would say: stick to DNS only (grey cloud) unless you really know what you are doing.
---
### Author:  [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [November 6, 2020, 6:47pm UTC](https://meta.discourse.org/t/getting-a-403-error-popup-when-trying-to-admin-users/169393/4 "2020-11-06T18:47:52Z")
> [@michaeld](#):
>
> As a rule of thumb I would say: stick to DNS only (grey cloud) unless you really know what you are doing.
---
### Author:  [@seeminglee](https://meta.discourse.org/u/seeminglee)
#### Post date: [November 6, 2020, 7:23pm UTC](https://meta.discourse.org/t/getting-a-403-error-popup-when-trying-to-admin-users/169393/5 "2020-11-06T19:23:13Z")
Noted — we do have to use Cloudflare for our other subdomains 😅