[jira] [Created] (ZEPPELIN-1602) REST API should return proper error status code & message when user is an anonymous

["Tae Jun Kim (JIRA)" <ji...@apache.org>]

Tae Jun Kim created ZEPPELIN-1602:
-------------------------------------

             Summary: REST API should return proper error status code & message when user is an anonymous
                 Key: ZEPPELIN-1602
                 URL: https://issues.apache.org/jira/browse/ZEPPELIN-1602
             Project: Zeppelin
          Issue Type: Bug
          Components: zeppelin-server
            Reporter: Tae Jun Kim


This issue is related to [ZEPPELIN-1586|https://github.com/apache/zeppelin/pull/1567]

Currently, when a user does not have permission, REST API returns proper error status code *403* with some message:
{code}
{"status":"FORBIDDEN","message":"Insufficient privileges you cannot get this note"}
{code}

However, when a user is anonymous, it returns *405* error status code without any message. The error status code should be *403*, because it's {{forbidden}}, not {{method not allowed}}. And also the server should return some error message. If not, users can be confused.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)