X-Git-Url: https://ruin.nu/git/?a=blobdiff_plain;f=lib%2FNDWeb%2FController%2FJSRPC.pm;h=5515a2aecfa824fec3c5e4703b8855ce1be477f8;hb=77bd36f5189b0de25ff99ffec16d9e9187feb2fd;hp=b1aeba7bb76915a518158f2ca2928d64a22b1c8d;hpb=04d8c1f0c632f94d49f9f1df96a53446189f5f4f;p=ndwebbie.git

diff --git a/lib/NDWeb/Controller/JSRPC.pm b/lib/NDWeb/Controller/JSRPC.pm
index b1aeba7..5515a2a 100644
--- a/lib/NDWeb/Controller/JSRPC.pm
+++ b/lib/NDWeb/Controller/JSRPC.pm
@@ -187,10 +187,10 @@ sub listTargets : Local {
 	$c->forward('/listTargets');
 }
 
-sub access_denied : Local {
+sub access_denied : Private {
 	my ($self, $c) = @_;
-
-	$c->stash(template => 'jsrcp/access_denied.tt2');
+	$c->stash(template => 'jsrpc/access_denied.tt2');
+	$c->res->status(403);
 }
 
 sub assertTarget : Private {
@@ -217,9 +217,11 @@ sub end : ActionClass('RenderView') {
 	if (scalar @{ $c->error } ){
 		if ($c->error->[0] =~ m/Can't call method "id" on an undefined value at/){
 			$c->stash->{template} = 'jsrpc/access_denied.tt2';
+			$c->res->status(403);
 			$c->clear_errors;
 		}elsif ($c->error->[0] =~ m/Missing roles: /){
 			$c->stash->{template} = 'jsrpc/access_denied.tt2';
+			$c->res->status(403);
 			$c->clear_errors;
 		}
 	}