summaryrefslogtreecommitdiff
path: root/modules/rest
diff options
context:
space:
mode:
authorBharat Mediratta <bharat@menalto.com>2010-03-03 10:17:48 -0800
committerTim Almdal <tnalmdal@shaw.ca>2010-03-13 08:39:05 -0800
commitc69f5f4906c367b900ec251d83a3156b9f9d73aa (patch)
tree781fada51b8aab93cc837a3f90e4f16f503b696a /modules/rest
parent08f11ce90edae83729537323925f167ef11b659e (diff)
Guests don't get access to the REST API.
Diffstat (limited to 'modules/rest')
-rw-r--r--modules/rest/helpers/rest.php3
1 files changed, 1 insertions, 2 deletions
diff --git a/modules/rest/helpers/rest.php b/modules/rest/helpers/rest.php
index cd962057..7440350f 100644
--- a/modules/rest/helpers/rest.php
+++ b/modules/rest/helpers/rest.php
@@ -39,8 +39,7 @@ class rest_Core {
static function set_active_user($access_token) {
if (empty($access_token)) {
- identity::set_active_user(identity::guest());
- return;
+ throw new Rest_Exception("Forbidden", 403);
}
$key = ORM::factory("user_access_token")