Whoops! Sorry, but you are not allowed to perform the action requested

I am using v1.5.0 - not an upgrade, fresh install of v1.5.0

My host is Web Hosting Pad, and I am using Authorize.net for payment processing. Since I do not believe Web Hosting Pad supports Curl with SSL support as is needed for the built in Authorize.net (AIM) payment module, I opted to use the built in Authorize.net (SIM) payment module.

With the SIM payment module in production mode, and my Authorize.net account in production mode, I performed a test transaction of $0.01. I received a receipt from my credit card company, the transaction shows up in Authorize.net as captured/pending settlement, and successfully settled at the end of day batch.

The problem is that when I placed my live test transaction, here is what happened:

• Clicked the button to actually process order (step 3 of checkout)
• The page changes to a 5 second countdown, processing via Authorize.net
• Instead of being taken to the checkout_success page, I am taken to the time_out page, displaying the message:
  "Whoops! Sorry, but you are not allowed to perform the action requested."

The order displays in my account under order history, I received the email from the shop with my order details, I received the email from Authorize.net with receipt of the payment - it appears everything is working as it should, except that after the payment is processed, I am taken to the time_out page instead of checkout_success.

I setup the Authorize.net (SIM) payment module by following this tutorial: http://www.zen-cart.com/content.php?303-how-to-set-up-the-authorizenet-sim-payment-module

I followed the directions exactly, so this should give you an idea of exactly what I have.

Any help greatly appreciated!

Thanks for reading.

Robert

Just for a bit of clarification, the SSL certificate is shared, therefore the https address of the store is not the default https://www.mydomain.com, but instead is https://www.webhostingpad.com/username/actual-url. Since the order and payment are processed successfully, I'm guessing that it may be an issue of the receipt page URL, although that setting is left blank as was suggested in the tutorial linked above, perhaps the session id is getting lost during the transition to Authorize.net and back.

I am planning on adjusting the receipt URL to the My Account page, then the customer would be shown the record of their order (also eliminates the checkout success page - never a bad thing as long as the customer knows the order has been processed - and what better way than to show them, hey, it's in your account records right here).

If this fix is successful I will post it here, but still would appreciate any information provided!

It might be related to the return URL ... as you say, losing the session.
It would probably work much better with a dedicated SSL certificate.

Also, you can test the CURL+SSL capability via the provided tool already on your site. See here: http://www.zen-cart.com/showthread.php?65680-Communications-Response-Testing-Tools&p=434187#post434187

Thank you for your response.

Using the CURL tester I verified that my host does offer CURL+SSL support.

I installed the AIM payment module, disabled SIM, did my test transactions, and everything worked perfectly.

I guess for those using SIM, they probably need to manually enter a receipt URL (if they were using the same setup as I am).