[TUSCANY-3389] Tuscany Policies is returning an error code of 401 instead of 403 when an authenticated user requests a service which is not authorized for their role

• Type: Bug
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: Java-SCA-1.x
• Fix Version/s: Java-SCA-1.6, Java-SCA-1.x
• Component/s: Java SCA Policy
• Environment: WASCE on Mac
• Assignee: Luciano Resende
• Reporter: Abraham Guerra
• Created: 09/Dec/09 00:18
• Updated: 13/Jan/10 23:25
• Resolved: 13/Jan/10 23:25

Description

I defined a secured service and provided authorized roles.
I authenticated as a user who is not in the appropriate role and requested the above service.
Policies returned a 401 error instead of 403