Change response code for unauthorized access from 403 to 401

This commit is contained in:
Garret Alfert
2013-12-08 22:37:07 +01:00
parent 3dd79e28d3
commit ba3f5db598
4 changed files with 29 additions and 29 deletions

View File

@@ -29,12 +29,12 @@ module RemoteStorage
authorizations = auth_bucket.get("#{user}:#{token}").data
permission = directory_permission(authorizations, directory)
server.halt 403 unless permission
server.halt 401 unless permission
if ["PUT", "DELETE"].include? request_method
server.halt 403 unless permission == "rw"
server.halt 401 unless permission == "rw"
end
rescue ::Riak::HTTPFailedRequest
server.halt 403
server.halt 401
end
def get_data(user, directory, key)