From 2dda47eabc5e9e0728f60dce1146cdba72288caf Mon Sep 17 00:00:00 2001 From: Beto Dealmeida Date: Thu, 23 Aug 2018 18:40:20 -0700 Subject: [PATCH] Use 403 (cherry picked from commit c567a89ee7529e88649d78f415a54988b01e218e) --- superset/views/core.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/superset/views/core.py b/superset/views/core.py index b14190c02da75..eb63d4882ec8a 100755 --- a/superset/views/core.py +++ b/superset/views/core.py @@ -2342,7 +2342,7 @@ def results(self, key): query.sql, query.database, query.schema) if rejected_tables: return json_error_response(security_manager.get_table_access_error_msg( - '{}'.format(rejected_tables)), status=401) + '{}'.format(rejected_tables)), status=403) return json_success(utils.zlib_decompress_to_string(blob)) @@ -2389,7 +2389,7 @@ def sql_json_call(self, request): return json_error_response( security_manager.get_table_access_error_msg(rejected_tables), link=security_manager.get_table_access_link(rejected_tables), - status=401) + status=403) session.commit() select_as_cta = request.form.get('select_as_cta') == 'true'