/user/<xyz>/2factor Access Denied?
-
Hi, I enabled 2 factor authentication on my site. Just now I got "Access Denied" when logged in as a user.
I am running 3.7.2. I get this both as a regular user, or as the site administrator visiting any user's 2factor settings page. Although I can see my own 2factor settings as the site administrator.
Just wonder . . . is this caused by any setting that I may have missed? Has anyone else seen this issue?
I did do a search of "2factor access denied" on this forum before posting this. Any information would be much appreciated.
-
In one case, it is a user in the "Global Moderator" group, on which I just turned on enforced 2FA, but the user does not have 2FA set up yet. That user seems to be forced to visit /user/<user1>/2factor no matter what the route is.
Another case is a user not in any group but does have 2FA set up. In this case, user2 can log in, and browse around. Just /user/<user2>/2factor would give an Access Denied.
