https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=43030

--- Comment #24 from Arthur Suzuki <[email protected]> ---
Created attachment 210438
  -->
https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=210438&action=edit
Bug 43030: Map Koha::Exceptions::Authorization::Unauthorized to 403 in
unhandled_exception

Koha::REST::Plugin::Objects (Task 7) throws this exception from inside
objects.find_rs when koha.self_access is set and the caller doesn't own
the resource. Controllers wrap their bodies in try/catch calling
$c->unhandled_exception($_), which only recognised a small allowlist of
exception types and rendered everything else as a generic 500. Add this
type to that allowlist, matching the rendering Koha::REST::V1::Auth
already uses for the same exception at the authentication gate.

Signed-off-by: Arthur Suzuki <[email protected]>

-- 
You are receiving this mail because:
You are watching all bug changes.
_______________________________________________
Koha-bugs mailing list -- [email protected]
To unsubscribe send an email to [email protected]
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

Reply via email to