Hi Ankur,

I think 403 is the correct response code here, since you are signed in
to the app but the account you are using is not an admin.

For more information, see the HTTP 1.1 spec on the 401 and 403
response codes:

http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html#sec10.4.2
http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html#sec10.4.4

If you want to change this behavior, you could create a handler which
does the user check and sets the desired response code.

Thank you,

Jeff

On Mar 31, 10:58 pm, Ankur <[email protected]> wrote:
> Hi,
>
> I uploaded my application and made my config file such that only admin
> can access application as of now.
>
> But when i use a account which is not admin for my application i am
> getting 403 :forbidden error ,but i think it should be 401.
>
> if i am trying the same in local dev server and login with "login as
> administrator" check box unchecked. i get 401-you are not authorized
> error.
>
> Can any one have any idea why this is happening.
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to 
[email protected]
For more options, visit this group at 
http://groups.google.com/group/google-appengine?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to