Multiple UI actions return Forbidden (Global VLAN page, Add Contact)

We are experiencing Forbidden errors in the web interface in more than one place.

The issue was initially noticed on the global VLAN page, and later also when attempting to add a new contact. We are not sure whether these two issues are related, but they appeared in the same environment.

Observed behaviour

• Accessing /vlan/ results in Forbidden
• Accessing /vlan/?debug=1 partially loads the page and displays an SQL error
• VLAN view per device works correctly
• Attempting to add a new contact via the UI also results in Forbidden
• Other areas of the UI continue to work normally

Message observed in debug mode

Failed dbQuery(1054 - Unknown column 'd.device_id' in 'where clause')
We are not certain whether this message is directly related to the Forbidden behaviour in all cases, but it consistently appears on the global VLAN page when debug mode is enabled.

Verification performed

• Verified that devices.device_id exists in the database and is the primary key
• No database schema changes were made
• User permissions and roles were verified and appear correct
• Authentication method, cache and session state were checked and do not appear to be the cause

 
Please let us know if additional information, debug output or validation steps are required.