summaryrefslogtreecommitdiff
path: root/modules
diff options
context:
space:
mode:
authorBharat Mediratta <bharat@menalto.com>2010-03-03 10:17:48 -0800
committerBharat Mediratta <bharat@menalto.com>2010-03-03 10:17:48 -0800
commit05d345e16dd04a4c8c766ffeb35bf56ff2362cd9 (patch)
treecc741d906e6e0837e635d6c59bbc3f480371d872 /modules
parentc3c2b45280c461acc8a63ac9c73d054f9a109234 (diff)
Guests don't get access to the REST API.
Diffstat (limited to 'modules')
-rw-r--r--modules/rest/helpers/rest.php3
1 files changed, 1 insertions, 2 deletions
diff --git a/modules/rest/helpers/rest.php b/modules/rest/helpers/rest.php
index cd962057..7440350f 100644
--- a/modules/rest/helpers/rest.php
+++ b/modules/rest/helpers/rest.php
@@ -39,8 +39,7 @@ class rest_Core {
static function set_active_user($access_token) {
if (empty($access_token)) {
- identity::set_active_user(identity::guest());
- return;
+ throw new Rest_Exception("Forbidden", 403);
}
$key = ORM::factory("user_access_token")