Michael Schurter ae61f7308d Fix HTTP code for permission denied errors ...

Fixes #3697

The existing code and test case only covered the leader behavior. When
querying against non-leaders the error has an "rpc error: " prefix.

To provide consistency in HTTP error response I also strip the "rpc
error: " prefix for 403 responses as they offer no beneficial additional
information (and in theory disclose a tiny bit of data to unauthorized
users, but it would be a pretty weird bit of data to use in a malicious
way).

2018-01-09 15:25:53 -08:00

13 KiB

Raw Blame History

View Raw