[jira] Reopened: (TUSCANY-3389) Tuscany Policies is returning an error code of 401 instead of 403 when an authenticated user requests a service which is not authorized for their role

["Luciano Resende (JIRA)" <de...@tuscany.apache.org>]

     [ https://issues.apache.org/jira/browse/TUSCANY-3389?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Luciano Resende reopened TUSCANY-3389:
--------------------------------------


The fix for this issue seems to always be returning 403 - Forbidden now. Reopening to get a proper fix.

> Tuscany Policies is returning an error code of 401 instead of 403 when an authenticated user requests a service which is not authorized for their role
> ------------------------------------------------------------------------------------------------------------------------------------------------------
>
>                 Key: TUSCANY-3389
>                 URL: https://issues.apache.org/jira/browse/TUSCANY-3389
>             Project: Tuscany
>          Issue Type: Bug
>          Components: Java SCA Policy
>    Affects Versions: Java-SCA-Next
>         Environment: WASCE on Mac
>            Reporter: Abraham Guerra
>            Assignee: Luciano Resende
>            Priority: Minor
>             Fix For: Java-SCA-1.6, Java-SCA-Next
>
>
> I defined a secured service and provided authorized roles.
> I authenticated as a user who is not in the appropriate role and requested the above service.
> Policies returned a 401 error instead of 403

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.