fix: switch to InsufficientAuthenticationException (401, Unauthorized…

…) if user in not superuser
Real-Dev-Squad · May 1, 2024 · e6c249d · e6c249d
1 parent 60e41c8
commit e6c249d
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/skill-tree/src/main/java/com/RDS/skilltree/Endorsement/EndorsementServiceImpl.java b/skill-tree/src/main/java/com/RDS/skilltree/Endorsement/EndorsementServiceImpl.java
@@ -15,7 +15,7 @@
 import lombok.RequiredArgsConstructor;
 import org.springframework.data.domain.Page;
 import org.springframework.data.domain.PageRequest;
-import org.springframework.security.access.AccessDeniedException;
+import org.springframework.security.authentication.InsufficientAuthenticationException;
 import org.springframework.security.core.context.SecurityContextHolder;
 import org.springframework.stereotype.Service;
 
@@ -70,7 +70,7 @@ public GenericResponse<Void> updateEndorsementStatus(String id, String status) {
         UserModel user =
                 (UserModel) SecurityContextHolder.getContext().getAuthentication().getPrincipal();
         if (!user.getRole().equals(UserRole.SUPERUSER)) {
-            throw new AccessDeniedException("Unauthorized access");
+            throw new InsufficientAuthenticationException("Unauthorized access");
         }
         if (!(Objects.equals(status, EndorsementStatus.APPROVED.name())
                 || Objects.equals(status, EndorsementStatus.REJECTED.name()))) {