Return a forbidden response code if unauthorized

28c54394 · Nicolas Widart · b3a544d5 · 28c54394
Unverified Commit 28c54394 authored Sep 16, 2017 by Nicolas Widart
Hide whitespace changes
Inline Side-by-side

Showing with 1 addition and 1 deletion

Authorization.php Modules/Core/Http/Middleware/Authorization.php +1 -1

No files found.
--- a/Modules/Core/Http/Middleware/Authorization.php
+++ b/Modules/Core/Http/Middleware/Authorization.php
@@ -50,7 +50,7 @@ class Authorization
    private function handleUnauthorizedRequest(Request $request, $permission)
    {
        if ($request->ajax()) {
-            return response('Unauthorized.', Response::HTTP_UNAUTHORIZED);
+            return response('Unauthorized.', Response::HTTP_FORBIDDEN);
        }
        if ($request->user() === null) {
            return redirect()->guest('auth/login');