https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=43030

--- Comment #8 from Martin Renvoize (ashimema) 
<[email protected]> ---
Created attachment 201753
  -->
https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=201753&action=edit
Bug 43030: Map Koha::Exceptions::Authorization::Unauthorized to 403 in
unhandled_exception

Koha::REST::Plugin::Objects (Task 7) throws this exception from inside
objects.find_rs when koha.self_access is set and the caller doesn't own
the resource. Controllers wrap their bodies in try/catch calling
$c->unhandled_exception($_), which only recognised a small allowlist of
exception types and rendered everything else as a generic 500. Add this
type to that allowlist, matching the rendering Koha::REST::V1::Auth
already uses for the same exception at the authentication gate.

-- 
You are receiving this mail because:
You are watching all bug changes.
You are the assignee for the bug.
_______________________________________________
Koha-bugs mailing list
[email protected]
https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

Reply via email to