Unauthorized Access to URL PostSave

Questions
1

Hey,

I have a user type with create permission but upon hitting Save and Send for approval it gives the error:

Authorization error: Unauthorized access to URL:
/umbraco/backoffice/UmbracoApi/Content/PostSave

I’ve found http://issues.umbraco.org/issue/U4-6973 but haven’t found any confirmation that this is the same or a related issue.

Currently using version 7.2.8.

Thanks

Jason

This is a companion discussion topic for the original entry at https://our.umbraco.com/forum/71594-unauthorized-access-to-url-postsave
2

Following the recent Windows update and system reboot, we encountered an authorization error while accessing a specific API endpoint in the Umbraco backoffice:

Authorization error: Unauthorized access to URL:

/umbraco/backoffice/umbracoapi/mediatype/GetById

While general functionality like media uploads and content changes remained unaffected, this error persisted and was visible in the console during backoffice operations.

Root Cause:

After investigation, it was determined that the Dynamic IP Restriction settings at the IIS level (likely enforced via a WAF or IP security module) were blocking or interfering with internal API requests made by Umbraco.

Umbraco’s backoffice framework appears to be sensitive to IP-based filtering, particularly when dynamic or loopback IPs are involved in server-side API calls.

Resolution:

We resolved the issue by removing the dynamic IP restriction rule from the IIS configuration. Once this was done, the authorization errors ceased, and full functionality was restored in the Umbraco admin interface.