API should return 401 for failed authorization and 403 when an authorized user does not have permissions for a resource
Bug #1291008 reported by
Steven Gonzales
This bug affects 1 person
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| Barbican |
Fix Released
|
High
|
Steven Gonzales | ||
Bug Description
policy.
Revision history for this message
| OpenStack Infra (hudson-openstack) wrote Fix merged to barbican (master) | #1 |
| Changed in barbican: | |
| status: | New → Fix Committed |
Revision history for this message
| John Vrbanac (john.vrbanac) wrote | #2 |
| Changed in barbican: | |
| assignee: | nobody → Steven Gonzales (stevendgonzales) |
| Changed in barbican: | |
| milestone: | none → icehouse |
| importance: | Undecided → High |
| Changed in barbican: | |
| status: | Fix Committed → Fix Released |
To post a comment you must log in.
Reviewed: https:/
Committed: https:/
Submitter: Jenkins
Branch: master
commit 8abef19c1e7291e
Author: Steven Gonzales <email address hidden>
Date: Tue Mar 11 14:59:33 2014 -0500
Correct RBAC response codes
Change response code form 401 to 403 when an authenticated user attempts to access a resource they do not have permission to.
Closes-Bug: 1291008
Change-Id: I3954da658eaa73