Alerting: Fix fine-grained rule access control to use 403 for authorization error (#79239)

* use 403 for authorization error * update silences API * add ForbiddenError to rule API responses
2023-12-07 13:43:58 -05:00
parent aa12c6c772
commit 2be7605794
17 changed files with 629 additions and 444 deletions
@@ -1049,7 +1049,7 @@ func TestIntegrationAlertRuleCRUD(t *testing.T) {
 				},
 				expectedCode: func() int {
 					if setting.IsEnterprise {
-						return http.StatusUnauthorized
+						return http.StatusForbidden
 					}
 					return http.StatusBadRequest
 				}(),
@@ -2285,7 +2285,7 @@ func TestIntegrationEval(t *testing.T) {
 			expectedResponse: func() string { return "" },
 			expectedStatusCode: func() int {
 				if setting.IsEnterprise {
-					return http.StatusUnauthorized
+					return http.StatusForbidden
 				}
 				return http.StatusBadRequest
 			},