fix: correct HTTP status code in case of insufficient user rights

cesko-digital · Aug 20, 2024 · 93d0c5d · 93d0c5d
1 parent 35b329b
commit 93d0c5d
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/app/upload/upload/route.ts b/app/upload/upload/route.ts
@@ -10,7 +10,12 @@ export async function POST(request: Request): Promise<Response> {
     // Only users with the `assetUpload` feature flag may upload
     const user = await getUserProfile(id);
     if (!user?.featureFlags.includes("assetUpload")) {
-      return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+      return NextResponse.json(
+        {
+          error: `Feature flag 'assetUpload' not set for user '${user?.name}'.`,
+        },
+        { status: 403 },
+      );
     }
 
     const body = (await request.json()) as HandleUploadBody;