[GitHub] storm issue #2421: [STORM-2815] UI HTTP server should return 403 if the user...

[Ethanlm]

Github user Ethanlm commented on the issue:

    https://github.com/apache/storm/pull/2421
  
    With the last commit (about `exceptionToJson`)
    ```
    C02T72WRG8WL-lm:~ ethanli$ curl -i  --negotiate -u:anyUser  -b 
~/cookiejar.txt -c ~/cookiejar.txt   
http://persistmist.corp.ne1.yahoo.com:8080/api/v1/cluster/summary
    HTTP/1.1 403 Forbidden
    Date: Wed, 15 Nov 2017 15:16:29 GMT
    Cache-Control: no-cache, no-store
    Access-Control-Allow-Origin: *
    Access-Control-Allow-Headers: Content-Type, Access-Control-Allow-Headers, 
Access-Controler-Allow-Origin, X-Requested-By, X-Csrf-Token, Authorization, 
X-Requested-With
    Content-Type: application/json;charset=utf-8
    Content-Length: 4900
    Server: Jetty(9.4.7.v20170914)
    
    {"error":"403 Forbidden","errorMessage":"AuthorizationException(msg:UI 
request 'getClusterInfo' for 'et...@ethan.storm.net' user is not authorized)
    ```
    
    Thanks @HeartSaVioR for pointing it out


---