API should return 401 for failed authorization and 403 when an authorized user does not have permissions for a resource
Bug #1291008 reported by
Steven Gonzales
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Barbican |
Fix Released
|
High
|
Steven Gonzales |
Bug Description
policy.
Changed in barbican: | |
milestone: | none → icehouse |
importance: | Undecided → High |
Changed in barbican: | |
status: | Fix Committed → Fix Released |
To post a comment you must log in.
Reviewed: https:/ /review. openstack. org/79749 /git.openstack. org/cgit/ stackforge/ barbican/ commit/ ?id=8abef19c1e7 291e8ed970acbfd 6042374c2eeb55
Committed: https:/
Submitter: Jenkins
Branch: master
commit 8abef19c1e7291e 8ed970acbfd6042 374c2eeb55
Author: Steven Gonzales <email address hidden>
Date: Tue Mar 11 14:59:33 2014 -0500
Correct RBAC response codes
Change response code form 401 to 403 when an authenticated user attempts to access a resource they do not have permission to.
Closes-Bug: 1291008 e96d0ba1eb91c08 92bb03f5fea
Change-Id: I3954da658eaa73