Return 403 when missing permissions instead of 401

This commit is contained in:
Bjarke Berg
2024-05-10 13:28:15 +02:00
parent 86d98eda8d
commit e9074ea97a

View File

@@ -23,9 +23,9 @@ public abstract class RequireTreeRootAccessAttribute : ActionFilterAttribute
var problemDetails = new ProblemDetails
{
Title = "Unauthorized user",
Title = "Forbidden",
Detail = "The current backoffice user should have access to the tree root",
Status = StatusCodes.Status401Unauthorized,
Status = StatusCodes.Status403Forbidden,
Type = "Error",
};