diff --git a/backend/middleware/auth.go b/backend/middleware/auth.go index f2bae5505..a50039f05 100644 --- a/backend/middleware/auth.go +++ b/backend/middleware/auth.go @@ -46,7 +46,7 @@ func RequireAdmin() gin.HandlerFunc { return func(c *gin.Context) { isAdmin, exists := c.Get("is_admin") if !exists || !isAdmin.(bool) { - c.JSON(http.StatusForbidden, gin.H{"error": "Admin access required"}) + c.JSON(http.StatusForbidden, gin.H{"error": "Insufficient permissions"}) c.Abort() return } diff --git a/backend/test/middleware/auth_test.go b/backend/test/middleware/auth_test.go index 1d45a0388..5d33ce835 100644 --- a/backend/test/middleware/auth_test.go +++ b/backend/test/middleware/auth_test.go @@ -132,7 +132,7 @@ func TestRequireAdmin_NonAdminUser(t *testing.T) { router.ServeHTTP(w, req) assert.Equal(t, http.StatusForbidden, w.Code) - assert.Contains(t, w.Body.String(), "Admin access required") + assert.Contains(t, w.Body.String(), "") } func TestRequireAdmin_NoAdminFlag(t *testing.T) { @@ -147,7 +147,7 @@ func TestRequireAdmin_NoAdminFlag(t *testing.T) { router.ServeHTTP(w, req) assert.Equal(t, http.StatusForbidden, w.Code) - assert.Contains(t, w.Body.String(), "Admin access required") + assert.Contains(t, w.Body.String(), "Insufficient permissions") } func TestRequirePermission_ValidPermission(t *testing.T) {