Hello, I am experiencing two issues on my Joomla 6 site and I would like to verify if your extension, Admin Tools, might be the cause. Here is my environment: Joomla version: 6.1.1 JCE Pro version: 2.9.99.8 Admin Tools version: 7.8.9 1. Super User modification issue: I am currently unable to modify or save changes to any other Super User account on the site. I suspect that Admin Tools might be blocking these changes for security reasons. Could you please let me know which specific setting in your plugin might be preventing this, and how I can safely enable the ability to edit Super User accounts? 2. JCE Media Manager "Invalid path" error: I am getting an "Invalid path" error when trying to upload images using the JCE Media Manager. However, the native Joomla Media Manager works perfectly fine. I have already checked the directory paths in the JCE configuration, and they seem correct. Could you please advise if Admin Tools might be blocking JCE's AJAX upload requests? If so, how can I check if there is a security exception related to JCE that I need to add to the WAF? (Optional: I have already checked the 'Blocked Requests Log' in Admin Tools and no recent blocked requests appear when I encounter this error.) Any guidance you can provide would be greatly appreciated. Thank you for your time and assistance.
#43132 Error editing the superuser account and uploading images via JCE Pro
This is a public ticket
Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.
Environment Information
Latest post by nicholas on Tuesday, 07 July 2026 09:00 CDT
Tuesday, 07 July 2026 08:42 CDT
Tuesday, 07 July 2026 09:00 CDT
Super User issue: Please read the “Disable editing user properties” part of the Configure WAF documentation page to understand why. You can disable this feature to edit the other Super Users, but I strongly advise re-enabling it right after as it protects you against a number of possible attacks.
On this note, please do read the product documentation. If you know what it does you can not only diagnose and address those issues faster, but you will also have enough information to understand what security hole you unplugged and evaluate whether you can afford to leave it unplugged. I cannot do that for you: you know your site's use case and your risk model better than anyone, including me.
JCE: Not related to Admin Tools. You will have to ask Ryan (JCE's developer) for help.
To put the latter but in context. First of all, I use JCE Pro on my own dev site. It works fine. Second, and most importantly, if Admin Tools was blocking the request you'd be getting an HTTP 403 error (not "Invalid Path") and a log entry in the Blocked Requests Log. What you get comes from JCE and, if I am not entirely mistaken, Joomla itself. Either way, it's not blocked by Admin Tools – and you could have easily checked that yourself by disabling the System - Admin Tools plugin.
Nicholas K. Dionysopoulos
Lead Developer and Director
🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!