fix: return 403 when non-admin tries to do admin requests

owncloud · Jul 9, 2024 · ec4bf13 · ec4bf13
1 parent 14667c3
commit ec4bf13
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/services/graph/pkg/middleware/requireadmin.go b/services/graph/pkg/middleware/requireadmin.go
@@ -48,7 +48,7 @@ func RequireAdmin(rm *roles.Manager, logger log.Logger) func(next http.Handler)
 				return
 			}
 
-			errorcode.AccessDenied.Render(w, r, http.StatusUnauthorized, "Unauthorized")
+			errorcode.AccessDenied.Render(w, r, http.StatusForbidden, "Forbidden")
 		})
 	}
 }