[TOMEE-1148] JAX-RS, EJBAccessException should be 401

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.6.0
• Fix Version/s: 7.0.0
• Assignee: Unassigned
• Reporter: David Blevins
• Created: 22/Mar/14 02:40
• Updated: 28/Jun/16 12:05
• Resolved: 28/Jun/16 12:05

Description

We should catch EJBAccessException and use a 401 status code instead of a 500.

Caused by: javax.ejb.EJBAccessException: Unauthorized Access by Principal Denied
at org.apache.openejb.core.stateless.StatelessContainer.invoke(StatelessContainer.java:174)
at org.apache.openejb.util.proxy.ProxyEJB$Handler.invoke(ProxyEJB.java:73)
at
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:601)
at org.apache.openejb.server.cxf.rs.OpenEJBEJBInvoker.performInvocation(OpenEJBEJBInvoker.java:88)
at org.apache.cxf.service.invoker.AbstractInvoker.invoke(AbstractInvoker.java:96)