|
|
@@ -308,7 +308,7 @@ class LoginAndPermissionMiddleware(object):
|
|
|
app_accessed = ui_app_accessed
|
|
|
|
|
|
if app_accessed and \
|
|
|
- app_accessed not in ("desktop", "home", "home2", "about", "hue", "editor", "notebook", "indexer", "404", "500") and \
|
|
|
+ app_accessed not in ("desktop", "home", "home2", "about", "hue", "editor", "notebook", "indexer", "404", "500", "403") and \
|
|
|
not (request.user.has_hue_permission(action="access", app=app_accessed) or
|
|
|
request.user.has_hue_permission(action=access_view, app=app_accessed)):
|
|
|
access_log(request, 'permission denied', level=access_log_level)
|