Body: <p>I've run into an odd issue and I can't seem to figure out what is going on.</p>
  
  <p><strong>Normal Process:</strong></p>
  
  <ol>
  <li>I click the Share arrow on a disabled entry.</li>
  <li>I copy the tokenized link and send it out.</li>
  <li>Folks without accounts are able to preview the page.</li>
  </ol>
  
  <p><strong>What is happening now:</strong></p>
  
  <ol>
  <li>I click the Share arrow on a disabled entry.</li>
  <li>I copy the tokenized link and send it out.</li>
  <li>Folks without accounts are given a 'Forbidden' warning. If I refresh my preview page, I also get the same warning.</li>
  </ol>
  
  <p><em>NOTES: There is no authentication required to access the template itself.</em></p>
  
  <p>I checked the latest updates to Craft but did not see anything obvious that might affect that. I double-checked that the token time extension that we added in general.php and it's still set to a week.</p>
  
  <p>Any ideas?</p>
  
  <p><a href="https://i.sstatic.net/G97DM.png" rel="nofollow noreferrer"><img src="https://i.sstatic.net/G97DM.png" alt="enter image description here"></a></p>
  
Comments.ContentLicense: CC BY-SA 3.0
Comments.CreationDate: 2017-10-30T20:12:47.307Z
Comments.Text: Can you post a screenshot of the Forbidden warning?  It sounds like it's coming from the web server instead of Craft.
Comments.UserDisplayName: Brad Bell
Comments.ContentLicense: CC BY-SA 3.0
Comments.CreationDate: 2017-10-30T20:13:23.913Z
Comments.Text: Also, does the template you're trying to share have any sort of authentication logic in it?
Comments.UserDisplayName: Brad Bell
Comments.ContentLicense: CC BY-SA 3.0
Comments.CreationDate: 2017-10-31T11:18:26.817Z
Comments.Text: @BradBell Updated, and no. It's just an article posting.
Comments.UserDisplayName: craftyguestsjt
Comments.ContentLicense: CC BY-SA 3.0
Comments.CreationDate: 2017-10-31T17:18:57.807Z
Comments.Text: Hrm... is mod_security or Suhosin installed on that server?
Comments.UserDisplayName: Brad Bell
Comments.ContentLicense: CC BY-SA 3.0
Comments.CreationDate: 2017-10-31T18:37:01.097Z
Comments.Text: @BradBell Nope.
Comments.UserDisplayName: craftyguestsjt
Comments.ContentLicense: CC BY-SA 3.0
Comments.CreationDate: 2017-10-31T20:50:33.087Z
Comments.Text: Is `/en/index.php` the same entry point that Craft uses to load normal requests?  i.e. the rest of the site and the Control Panel loads fine?
Comments.UserDisplayName: Brad Bell
Comments.ContentLicense: CC BY-SA 3.0
Comments.CreationDate: 2017-11-01T17:13:04.573Z
Comments.Text: @BradBell Yup! We can access the rest of the site and control panel items just fine. We only seem to encounter this error when we try to share a disabled entry.
Comments.UserDisplayName: craftyguestsjt
Comments.ContentLicense: CC BY-SA 3.0
Comments.CreationDate: 2017-11-01T18:51:26.780Z
Comments.Text: I'm officially out of ideas. ¯\_(ツ)_/¯ I can't imagine how a non-Craft authenticated request would cause an Apache 403 forbidden response.
Comments.UserDisplayName: Brad Bell
Tags: <entry>
Title: Share: Getting 'Forbidden' message when sharing externally
ThreadText: # Share: Getting 'Forbidden' message when sharing externally
  
  (Asked by: username_0 on 2017-10-30)
  
  I've run into an odd issue and I can't seem to figure out what is going on.
  
  **Normal Process:**
  
  1. I click the Share arrow on a disabled entry.
  2. I copy the tokenized link and send it out.
  3. Folks without accounts are able to preview the page.
  
  **What is happening now:**
  
  1. I click the Share arrow on a disabled entry.
  2. I copy the tokenized link and send it out.
  3. Folks without accounts are given a 'Forbidden' warning. If I refresh my preview page, I also get the same warning.
  
  *NOTES: There is no authentication required to access the template itself.*
  
  I checked the latest updates to Craft but did not see anything obvious that might affect that. I double-checked that the token time extension that we added in general.php and it's still set to a week.
  
  Any ideas?
  
  [![enter image description here](https://i.sstatic.net/G97DM.png)](https://i.sstatic.net/G97DM.png)
  
  **Tags:** entry
  
  > **Comments:**
  > **username_1**: Can you post a screenshot of the Forbidden warning?  It sounds like it's coming from the web server instead of Craft.  
  > **username_1**: Also, does the template you're trying to share have any sort of authentication logic in it?  
  > **username_0**: @username_1 Updated, and no. It's just an article posting.  
  > **username_1**: Hrm... is mod_security or Suhosin installed on that server?  
  > **username_0**: @username_1 Nope.  
  > **username_1**: Is `/en/index.php` the same entry point that Craft uses to load normal requests?  i.e. the rest of the site and the Control Panel loads fine?  
  > **username_0**: @username_1 Yup! We can access the rest of the site and control panel items just fine. We only seem to encounter this error when we try to share a disabled entry.  
  > **username_1**: I'm officially out of ideas. ¯\_(ツ)_/¯ I can't imagine how a non-Craft authenticated request would cause an Apache 403 forbidden response.  
  
  ---
  
  ## 0 answers
  
  