From 2d6faaf2dde2393680175fdb46072065d4483254 Mon Sep 17 00:00:00 2001
From: Bjørn Christian Seime <bjorncs@verizonmedia.com>
Date: Fri, 8 Nov 2019 13:34:51 +0100
Subject: Distinguish between different errors in ControllerAuthroizationFilter

---
 .../hosted/controller/restapi/filter/ControllerAuthorizationFilter.java | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'controller-server')

diff --git a/controller-server/src/main/java/com/yahoo/vespa/hosted/controller/restapi/filter/ControllerAuthorizationFilter.java b/controller-server/src/main/java/com/yahoo/vespa/hosted/controller/restapi/filter/ControllerAuthorizationFilter.java
index 72336b4accf..ec95f0bbb4c 100644
--- a/controller-server/src/main/java/com/yahoo/vespa/hosted/controller/restapi/filter/ControllerAuthorizationFilter.java
+++ b/controller-server/src/main/java/com/yahoo/vespa/hosted/controller/restapi/filter/ControllerAuthorizationFilter.java
@@ -39,7 +39,7 @@ public class ControllerAuthorizationFilter extends JsonSecurityRequestFilterBase
             Optional<SecurityContext> securityContext = Optional.ofNullable((SecurityContext)request.getAttribute(SecurityContext.ATTRIBUTE_NAME));
 
             if (securityContext.isEmpty())
-                return Optional.of(new ErrorResponse(Response.Status.FORBIDDEN, "Access denied"));
+                return Optional.of(new ErrorResponse(Response.Status.UNAUTHORIZED, "Access denied - not authenticated"));
 
             Action action = Action.from(HttpRequest.Method.valueOf(request.getMethod()));
 
-- 
cgit v1.2.3