Tae Jun Kim created ZEPPELIN-1602:
-------------------------------------

             Summary: REST API should return proper error status code & message 
when user is an anonymous
                 Key: ZEPPELIN-1602
                 URL: https://issues.apache.org/jira/browse/ZEPPELIN-1602
             Project: Zeppelin
          Issue Type: Bug
          Components: zeppelin-server
            Reporter: Tae Jun Kim


This issue is related to 
[ZEPPELIN-1586|https://github.com/apache/zeppelin/pull/1567]

Currently, when a user does not have permission, REST API returns proper error 
status code *403* with some message:
{code}
{"status":"FORBIDDEN","message":"Insufficient privileges you cannot get this 
note"}
{code}

However, when a user is anonymous, it returns *405* error status code without 
any message. The error status code should be *403*, because it's {{forbidden}}, 
not {{method not allowed}}. And also the server should return some error 
message. If not, users can be confused.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to