[pdm-devel] [PATCH datacenter-manager] api: fail with HTTP 403 Forbidden if user does have access to resource

Thomas Lamprecht t.lamprecht at proxmox.com
Wed Nov 5 09:54:59 CET 2025


On Wed, 05 Nov 2025 09:12:55 +0100, Lukas Wagner wrote:
> As discussed in another patch series [1], if a user does not have
> enough permissions to see a resource, we should fail with 403 Forbidden
> instead of 401 Unauthorized. The UI relies on returning the correct
> error codes, since a 401 will redirect the user to the login mask.
> 
> [1] https://lore.proxmox.com/pdm-devel/DDJLG0Y8J5CP.1NMNIMD5ZEYZE@proxmox.com/
> 
> [...]

Applied, slightly extended the commit message with a bit more reasoning,
thanks!

[1/1] api: fail with HTTP 403 Forbidden if user does have access to resource
      commit: 5c2557f3f8a860aaaf919e1a6526c828635f2c11




More information about the pdm-devel mailing list