Return 403 instead of 401 when policies reject

Fixes bug 921744 Change-Id: Ib4b6405dffa3ee2e8ef2b8a7710124f97f0fdf43
openstack · Jan 25, 2012 · 4a04d29 · 4a04d29
1 parent fcf73f9
commit 4a04d29
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/nova/api/openstack/wsgi.py b/nova/api/openstack/wsgi.py
@@ -573,7 +573,7 @@ def __exit__(self, ex_type, ex_value, ex_traceback):
 
         if isinstance(ex_value, exception.NotAuthorized):
             msg = unicode(ex_value)
-            raise Fault(webob.exc.HTTPUnauthorized(explanation=msg))
+            raise Fault(webob.exc.HTTPForbidden(explanation=msg))
         elif isinstance(ex_value, TypeError):
             LOG.exception(ex_value)
             raise Fault(webob.exc.HTTPBadRequest())

diff --git a/nova/tests/api/openstack/test_wsgi.py b/nova/tests/api/openstack/test_wsgi.py
@@ -204,7 +204,7 @@ def index(self, req):
         req = webob.Request.blank('/tests')
         app = fakes.TestRouter(Controller())
         response = req.get_response(app)
-        self.assertEqual(response.status_int, 401)
+        self.assertEqual(response.status_int, 403)
 
     def test_dispatch(self):
         class Controller(object):