fix: return 403 when non-admin tries to do admin requests

2026-05-02 08:49:29 -05:00 · 2023-08-02 19:06:32 +05:45
parent 698d24c4e7
commit a93a74f9d1
1 changed files with 1 additions and 1 deletions
@@ -48,7 +48,7 @@ func RequireAdmin(rm *roles.Manager, logger log.Logger) func(next http.Handler)
 				return
 			}

-			errorcode.AccessDenied.Render(w, r, http.StatusUnauthorized, "Unauthorized")
+			errorcode.AccessDenied.Render(w, r, http.StatusForbidden, "Forbidden")
 		})
 	}
 }