chore: change returned response for missing permissions to 403 from 404 (#16562)

brettkolodny · web-flow · commit db767286b927 · 2025-02-13T17:05:20.000-05:00
diff --git a/coderd/coderd.go b/coderd/coderd.go
@@ -1304,7 +1304,7 @@ func New(options *Options) *API {
 				func(next http.Handler) http.Handler {
 					return http.HandlerFunc(func(rw http.ResponseWriter, r *http.Request) {
 						if !api.Authorize(r, policy.ActionRead, rbac.ResourceDebugInfo) {
-							httpapi.ResourceNotFound(rw)
+							httpapi.Forbidden(rw)
 							return
 						}
 

Original file line number	Diff line number	Diff line change
`@@ -1304,7 +1304,7 @@ func New(options Options) API {`
`1304`	`1304`	`func(next http.Handler) http.Handler {`
`1305`	`1305`	`return http.HandlerFunc(func(rw http.ResponseWriter, r *http.Request) {`
`1306`	`1306`	`if !api.Authorize(r, policy.ActionRead, rbac.ResourceDebugInfo) {`
`1307`		`- httpapi.ResourceNotFound(rw)`
	`1307`	`+ httpapi.Forbidden(rw)`
`1308`	`1308`	`return`
`1309`	`1309`	`}`
`1310`	`1310`