Merge pull request #115 from pearkes/master

Respond with a 404 status code to inaccessible resources

flask_admin/base.py

@@ -244,7 +244,7 @@ class BaseView(object):
             This method will be executed before calling any view method.
 
             By default, it will check if admin class is accessible and if it is not - will
-            throw HTTP 403 error.
+            throw HTTP 404 error.
 
             :param name:
                 View function name
@@ -252,7 +252,7 @@ class BaseView(object):
                 View function arguments
         """
         if not self.is_accessible():
-            return abort(403)
+            return abort(404)
 
 
 class AdminIndexView(BaseView):

flask_admin/tests/test_base.py

@@ -178,7 +178,7 @@ def test_permissions():
     view.allow_access = False
 
     rv = client.get('/admin/mockview/')
-    eq_(rv.status_code, 403)
+    eq_(rv.status_code, 404)
 
 
 def test_submenu():