I recently moved my site to a new host-- everything seemed to be working fine, but now I have a small number of authenticated users receiving 403 errors when trying to update their profile: "Forbidden You don't have permission to access /user/8409/edit/Profile on this server."
They are not receiving the themed 403 with our header, just a generic error message. The majority of users have experienced no error, but I cannot resolve the problem for those particular users. I fear this has something to do with the htaccess configuration, which was copied from the old host's setup. The drupal htaccess file is completely commented out, instead the rewrites were all in the public_html htaccess file. (drupal is installed in a subdirectory).
The htacces file is as follows:
Options -Indexes
RewriteEngine on
Options +FollowSymLinks
RewriteCond %{HTTP_HOST} !^my-site.org$ [NC]
RewriteRule .* http://my-site.org/ [L,R=301]
RewriteRule ^$ prod/index.php [L]
RewriteCond %{DOCUMENT_ROOT}/prod%{REQUEST_URI} -f
RewriteRule .* prod/$0 [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule .* prod/index.php?q=$0 [QSA]
RewriteCond %{HTTP_HOST} ^my-site.org$
RewriteRule ^prod\/?$ "http\:\/\/my\-site\.org\/" [R=302,L]