Hi, the Ditty editor saves your changes through the WordPress REST API, and a 403 means that save request is being refused. There are three usual causes:
- User permissions: Ditty refuses the save if your user role does not have permission to edit Dittys, or if you are editing a Ditty created by another user without permission to edit other users’ Dittys. Try with an Administrator account.
- Expired session: if the editor was open for a long time, the security token can expire. Reload the editor page, or log out and back in, then try again.
- A firewall or security plugin blocking REST requests: a security plugin, your host’s firewall or ModSecurity can block these save requests. Temporarily disable the security plugin, or ask your host whether something is blocking requests to /wp-json/.
To find out which one it is: open your browser’s developer tools (F12), go to the Network tab, try to save again, click the failed “save” request and look at the Response. If it shows “rest_forbidden”, it is the permissions. If it shows “rest_cookie_invalid_nonce”, it is the session. If it shows an HTML block page, it is a firewall.
More about how REST API requests are authenticated: https://developer.wordpress.org/rest-api/using-the-rest-api/authentication/
Which user role are you using, and what does that Response show?
