I raised bug #3065 re: 403 Error Changing the Default Country in Default Config. The problem appeared in 0.8.16100. The ticket is now marked closed and I’m still getting the problem in 0.8.17240.
System -> Configuration -> General -> Countries Options (Current Config Scope: Default Config). The page shows:
The Default country is “United States” and
Allow counties is “All countries are selected”
Making no changes and clicking on Save Config gives this error:
403 - “You don’t have permission to access /magento/index.php/admin/system_config/save/section/general/ on this server.”
If repeated, but in Allow countries “Lesotho” is deselected all is ok. (Deselecting any other combination of countries doesn’t work). Can’t try it out in the demo store (http://demo-admin.magentocommerce.com) because System -> Configuration is locked down.
Wierd but there it is!
What’s going on with Lesotho? And why was 3065 closed without comment?