search

DependencyTrack / dependency-track

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
https://dependencytrack.org/
Apache License 2.0
2.61k stars 553 forks source link

BOM submission should respond 403 when there's no permission to create project #3920

Open merlinran opened 3 months ago

merlinran commented 3 months ago

Current Behavior

https://github.com/DependencyTrack/dependency-track/blob/d25e48d2b8ed5f70382356440f582af15d556c4e/src/main/java/org/dependencytrack/resources/v1/BomResource.java#L321

Proposed Behavior

respond Response.Status.FORBIDDEN instead

Checklist