Comment 4 for bug 1750646

Revision history for this message
Matias Bordese (matiasb) wrote :

FYI, the problem here seems to be that when not query is passed (a section request) to the search endpoint in a private request, the first thing we do is verify auth and if it fails, return a 401.
Meanwhile, if a filter is given (like a name), we filter at a deeper level (snapident) without returning authenticated/private results if auth is not ok or missing (and without raising an error).