|
|
@ -6,7 +6,7 @@ Controllers assess authentication by 3 criteria: |
|
|
|
2. Are you signed in and requesting an action that your role/user type has access to? |
|
|
|
2. Are you signed in and requesting an action that your role/user type has access to? |
|
|
|
3. Are you signed in, requesting an action that your role/user type has access to and requesting a resource that your user has access to. |
|
|
|
3. Are you signed in, requesting an action that your role/user type has access to and requesting a resource that your user has access to. |
|
|
|
|
|
|
|
|
|
|
|
When these aren't met the fail with the following response types: |
|
|
|
When these aren't met they fail with the following response types: |
|
|
|
|
|
|
|
|
|
|
|
1. 401: Unauthorized. Redirect to sign-in page. |
|
|
|
1. 401: Unauthorized. Redirect to sign-in page. |
|
|
|
2. 401: Unauthorized |
|
|
|
2. 401: Unauthorized |
|
|
|