Should send "403 - Forbidden" for security exceptions, not "401 - Unauthorized".

This commit is contained in:
Michael Jumper
2012-03-25 23:09:40 -07:00
parent fbec97f356
commit fd4b4610ae

View File

@@ -170,7 +170,7 @@ public abstract class GuacamoleHTTPTunnelServlet extends HttpServlet {
// HTTP response, logging each error appropriately.
catch (GuacamoleSecurityException e) {
logger.warn("Authorization failed.", e);
sendError(response, HttpServletResponse.SC_UNAUTHORIZED);
sendError(response, HttpServletResponse.SC_FORBIDDEN);
}
catch (GuacamoleResourceNotFoundException e) {
logger.debug("Resource not found.", e);