encode/django-rest-framework
1
1
Fork 0
mirror of https://github.com/encode/django-rest-framework.git synced 2025-07-23 14:40:06 +03:00
Code Issues Packages Projects Releases Wiki Activity

raise 401 instead of 403 when user is not authenticated

Browse Source
This commit is contained in:
Sébastien Béal 2012-03-17 20:27:01 +09:00
parent 55317b0372
commit cd546fdaee
1 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
djangorestframework/permissions.py
View File

@ -23,6 +23,11 @@ __all__ = (
SAFE_METHODS = ['GET', 'HEAD', 'OPTIONS']
_401_UNAUTHORIZED = ErrorResponse(
status.HTTP_401_UNAUTHORIZED,
{'detail': 'The request requires user authentication.'},
{'WWW-Authenticate': 'Basic realm="API"'})
_403_FORBIDDEN_RESPONSE = ErrorResponse(
status.HTTP_403_FORBIDDEN,
{'detail': 'You do not have permission to access this resource. ' +
@ -66,7 +71,7 @@ class IsAuthenticated(BasePermission):
def check_permission(self, user):
if not user.is_authenticated():
raise _403_FORBIDDEN_RESPONSE
raise _401_UNAUTHORIZED
class IsAdminUser(BasePermission):