Inappropriate WSGI exception mapping for HTTP Unathorized 401

[Denis M.]

This exception mapping says that HTTP 403 is a HTTP 401 which is completely wrong.

Example:
When regular user tries to access admin API endpoints Trove will raise H401 exception (Unauthorized), but user passed authorization.

This issue violates RFC 2616 (see http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html)

https://github.com/openstack/trove/blob/master/trove/common/wsgi.py#L316-L318

        webob.exc.HTTPUnauthorized: [
            exception.Forbidden,
            exception.SwiftAuthError,
        ],

webob has specific section for HTTP Forbidden exceptions.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/111278

[OpenStack Infra (hudson-openstack)]

Change abandoned by Denis M. (<email address hidden>) on branch: master
Review: https://review.openstack.org/111278

[Launchpad Janitor (janitor)]

[Expired for OpenStack DBaaS (Trove) because there has been no activity for 60 days.]