The @authorize decorator raises the wrong HTTP exception

marrow / WebCore

WebCore, the super tiny and blazingly fast modular Python web nanoframework.

MIT License

96 stars 9 forks source link

The @authorize decorator raises the wrong HTTP exception #134

Closed agronholm closed 12 years ago

agronholm commented 12 years ago

The HTTPUnauthorized (401) exception was meant for indicating that HTTP authentication is required. The HTTPForbidden (403) should instead be raised to properly indicate that the user does not have the required permissions for this action.