[AMBARI-14004] Return HTTP 403 on REST API authorization failures

• Type: Task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.0.0
• Fix Version/s: 2.0.0
• Component/s: ambari-server
• Labels: rbac
• Epic Link: Ambari role-based access control
• Assignee: Robert Levas
• Reporter: Robert Levas
• Created: 21/Nov/15 10:52
• Updated: 21/Nov/15 23:15
• Resolved: 21/Nov/15 20:07

Description

Return HTTP 403 on REST API authorization failures.

403 Forbidden

 
{
  "status" : 403,
  "message" : "The authenticated user is not authorized to perform the requested operation"
}

Issue Links

• links to: ReviewBoard