Comment 13 for bug 1121494

Revision history for this message
Dolph Mathews (dolph) wrote : Re: EC2 authentication does not ensure user or tenant is enabled

+1 all around, except I'd rather not change the status codes from 401 -> 400 in essex & folsom, even though 400 is obviously more appropriate. I'd prefer to change it in grizzly, but perhaps that change would be more appropriate as a public followup to this security fix. I'm happy to see the message argument removed from those exceptions, however.