fix: return 403 when non-admin tries to do admin requests

owncloud · Aug 2, 2023 · 6dcb51b · 6dcb51b
1 parent c5fbd6f
commit 6dcb51b
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/services/graph/pkg/middleware/requireadmin.go b/services/graph/pkg/middleware/requireadmin.go
@@ -47,7 +47,7 @@ func RequireAdmin(rm *roles.Manager, logger log.Logger) func(next http.Handler)
 				return
 			}
 
-			errorcode.AccessDenied.Render(w, r, http.StatusUnauthorized, "Unauthorized")
+			errorcode.AccessDenied.Render(w, r, http.StatusForbidden, "Forbidden")
 		})
 	}
 }