# Change password 403 forbidden

**URL:** <https://forum.radsystems.io/t/change-password-403-forbidden/1527>\
**Category:** Bugs\
**Created:** [April 25, 2023, 1:31pm UTC](https://forum.radsystems.io/t/change-password-403-forbidden/1527 "2023-04-25T13:31:05Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![magomissael](https://forum.radsystems.io/user_avatar/forum.radsystems.io/magomissael/32/716_2.png) [@magomissael](https://forum.radsystems.io/u/magomissael)\
**Post date:** [April 25, 2023, 1:31pm UTC](https://forum.radsystems.io/t/change-password-403-forbidden/1527/1 "2023-04-25T13:31:05Z")

</div>

When activating the roles and permissions, no user can change their password, including the administrator user

I am using:

- radsystem 8.1.8
- Php Laravel
- Bootstrap JQuery
- Php 7.4.33

 ![photo_2023-04-25_09-30-24](https://forum.radsystems.io/uploads/default/original/1X/318a1a5756f7f148ff8d3e345707f9036d2f6815.jpeg)  
 ![photo_2023-04-25_09-30-30](https://forum.radsystems.io/uploads/default/original/1X/ff9368157270dc571f9893ac8cd93ca05f90fbab.jpeg)

---

<div class="post-metadata">

**Author:** ![willvin](https://forum.radsystems.io/user_avatar/forum.radsystems.io/willvin/32/7_2.png) [@willvin](https://forum.radsystems.io/u/willvin)\
**Post date:** [April 27, 2023, 11:13am UTC](https://forum.radsystems.io/t/change-password-403-forbidden/1527/2 "2023-04-27T11:13:12Z")

</div>

Make sure you have given that user permission to edit his or her account.

---

<div class="post-metadata">

**Author:** ![magomissael](https://forum.radsystems.io/user_avatar/forum.radsystems.io/magomissael/32/716_2.png) [@magomissael](https://forum.radsystems.io/u/magomissael)\
**Post date:** [April 27, 2023, 12:37pm UTC](https://forum.radsystems.io/t/change-password-403-forbidden/1527/3 "2023-04-27T12:37:36Z")

</div>

it has all permission @willvin

 ![imagen](https://forum.radsystems.io/uploads/default/original/1X/30bbe584db4532c7190eb8312da0148ee9b366e2.png)

---

<div class="post-metadata">

**Author:** ![thaywo](https://forum.radsystems.io/letter_avatar_proxy/v4/letter/t/2bfe46/32.png) [@thaywo](https://forum.radsystems.io/u/thaywo)\
**Post date:** [May 1, 2023, 1:43am UTC](https://forum.radsystems.io/t/change-password-403-forbidden/1527/4 "2023-05-01T01:43:20Z")

</div>

inside the web.php, bellow this line  
Route::middleware([‘auth’, ‘rbac’])-\>group(function () {

remove  
" Route::post(‘account/changepassword’, ‘AccountController@changepassword’)-\>name(‘account.changepassword’);"  
and paste it at the top…

---

<div class="post-metadata">

**Author:** ![nickzworld](https://forum.radsystems.io/user_avatar/forum.radsystems.io/nickzworld/32/970_2.png) [@nickzworld](https://forum.radsystems.io/u/nickzworld)\
**Post date:** [June 14, 2023, 5:23pm UTC](https://forum.radsystems.io/t/change-password-403-forbidden/1527/5 "2023-06-14T17:23:49Z")

</div>

I already have the work around this issue since this is a compilation bug

Work Around Solution:  
1.After activating the roles and permissions  
2.Go to your database and find the table name “Permissions”  
3. Add/Insert another records on the table and input the following values:  
 → for “ **permission** ” column name the value is “account/changepassword”  
 → for “ **role\_id** ” column name the value is base on the value of **role id of the user**

It will look like this in my case  
 ![image](https://forum.radsystems.io/uploads/default/original/1X/c61259f5932b7f886c995cb0ce5a04807ce9c5a1.png)

---

<div class="post-metadata">

**Author:** ![wizardigitalpro](https://forum.radsystems.io/user_avatar/forum.radsystems.io/wizardigitalpro/32/1309_2.png) [@wizardigitalpro](https://forum.radsystems.io/u/wizardigitalpro)\
**Post date:** [August 28, 2024, 5:43pm UTC](https://forum.radsystems.io/t/change-password-403-forbidden/1527/6 "2024-08-28T17:43:27Z")

</div>

When activating the roles and permissions, users cannot change their password, including the administrator user

I am using:

radsystem 8.7.0  
Php Laravel  
Bootstrap JQuery  
Php 8.1.25