### Authorization Required

yoshelb / mod-4-portfolio-project

0 stars 0 forks source link

Open yoshelb opened 3 months ago

yoshelb commented 3 months ago

All endpoints that require a current user to have the correct role(s) or permission(s) receive a standard authorization response.

[ ] Authorization middleware responds with error status 403 when an authenticated user does not have the correct role(s) or permission(s)

yoshelb commented 3 months ago

This is unwritten- should have this body response: { "message": "Forbidden" }