[api]verify env template may return wrong http response

[Lei Zhang]

In murano/utils, there is a verify_env_template decorator, if request tenant doesn't match environment template' s tenant, a 401 HTTPUnauthorized is raised, should raise a 403 forbidden instead.

Same is true for both verify_env_template and verify_env decorators

[Kirill Zaitsev (kzaitsev)]

Same is true for both verify_env_template and verify_env decorators

[Kirill Zaitsev (kzaitsev)]

Would also be nice to check and update documentation on this one =)

[Lei Zhang (lei-a-zhang)]

Not only those two decorators, there are some duplicate api code also does the verification work, so better to grep HTTPUnauthorized to make sure it is used in right place.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/238269

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/238269
Committed: https://git.openstack.org/cgit/openstack/murano/commit/?id=1ca86fd4187e18086807505a95869d3b71538f28
Submitter: Jenkins
Branch: master

commit 1ca86fd4187e18086807505a95869d3b71538f28
Author: Akanksha <email address hidden>
Date: Thu Oct 22 04:19:36 2015 +0530

    Return 403 instead of 401 HTTP Response

    401 Unauthorized is the HTTP status code used for authentication
    errors for eg. Missing or Bad Authentication. 403 Forbidden
    response is used for denying permission to access resources
    for a correctly authenticated user.
    This fix corrects the mistake in the api.

    Change-Id: I0903b226cfe32a7aed69d265a27ca21d7cc9b98e
    Closes-Bug:1477013