summaryrefslogtreecommitdiff
path: root/src/mod_http_api.erl
diff options
context:
space:
mode:
authorMickael Remond <mremond@process-one.net>2016-07-23 17:57:44 +0200
committerMickael Remond <mremond@process-one.net>2016-07-23 18:21:45 +0200
commit68555ff4666588bba68e372b66d5bdbef3849838 (patch)
tree0dcf2d4bdbbf0d796a7a37578529c0fa576e1cca /src/mod_http_api.erl
parentError when not authorized should be 403 (diff)
Add support for checking access rules conformance for commands
Diffstat (limited to 'src/mod_http_api.erl')
-rw-r--r--src/mod_http_api.erl1
1 files changed, 1 insertions, 0 deletions
diff --git a/src/mod_http_api.erl b/src/mod_http_api.erl
index 07a1574e..bc30ee09 100644
--- a/src/mod_http_api.erl
+++ b/src/mod_http_api.erl
@@ -136,6 +136,7 @@ check_permissions(Request, Command) ->
{ok, CommandPolicy, Scope} = ejabberd_commands:get_command_policy_and_scope(Call),
check_permissions2(Request, Call, CommandPolicy, Scope);
_ ->
+ %% TODO Should this be a 404 or 400 instead of 401 ?
unauthorized_response()
end.