<p>I'm hitting an issue where signed-in non-admin users can't create a new entry with a front-end entry form (but can edit existing ones). Everything works except for this single instance:</p>

<p>✓ Admin creates and edits entries from <em>non-ajax</em> front-end form (Works!)</p>

<p>✓ Admin creates and edits entries from <em>ajax</em> front-end form (Works!)</p>

<p>✓ Non-admin edits their entries from a front-end form (Works!)</p>

<p><strong>✗ Non-admin creates new entry from a front-end form</strong> (Doesn't work)</p>

<p>Craft is returning: "<strong>User is not permitted to perform this action</strong>"</p>

<p>Tried all of these with and without CSRF on. This is the user group permissions on the section it's submitting to:</p>

<p><a href="https://i.sstatic.net/z1m4Q.png" rel="nofollow noreferrer"><img src="https://i.sstatic.net/z1m4Q.png" alt="enter image description here"></a></p>

<p>Using: Craft 3.1.21.1 (with multi-site)</p>

<p><em>Edit: Original post stated that it was only a problem with ajax forms, but turns out it's all forms</em></p>

CC BY-SA 4.0
2019-04-12T20:32:49.183Z
Could you include the response of your ajax request?
Robin Schambach
CC BY-SA 4.0
2019-10-28T18:05:56.943Z
I have the same problem... Did you make any progress?
outline4
CC BY-SA 4.0
2019-10-28T18:23:05.187Z
I solved my problem: I had to allow "edit site x" for the user group.
outline4
<frontend-form>
Non-admins can't create new entries with front-end form (ajax)
# Non-admins can't create new entries with front-end form (ajax)

(Asked by: username_0 on 2019-04-12)

I'm hitting an issue where signed-in non-admin users can't create a new entry with a front-end entry form (but can edit existing ones). Everything works except for this single instance:

✓ Admin creates and edits entries from *non-ajax* front-end form (Works!)

✓ Admin creates and edits entries from *ajax* front-end form (Works!)

✓ Non-admin edits their entries from a front-end form (Works!)

**✗ Non-admin creates new entry from a front-end form** (Doesn't work)

Craft is returning: "**User is not permitted to perform this action**"

Tried all of these with and without CSRF on. This is the user group permissions on the section it's submitting to:

[![enter image description here](https://i.sstatic.net/z1m4Q.png)](https://i.sstatic.net/z1m4Q.png)

Using: Craft 3.1.21.1 (with multi-site)

*Edit: Original post stated that it was only a problem with ajax forms, but turns out it's all forms*

**Tags:** frontend-form

> **Comments:**
> **username_1**: Could you include the response of your ajax request?  
> **username_2**: I have the same problem... Did you make any progress?  
> **username_2**: I solved my problem: I had to allow "edit site x" for the user group.  

---

## 0 answers

