Security exception returns a code 200

• Type: Bug
• Status: Closed
• Resolution: Fixed
• Affects Version/s: 6.2.X EE
• Fix Version/s: 6.2.X EE
• Component/s: Web Services, Web Services > JSON WS
• Labels:
  • liferay-fixpack-portal-119-6210
• Branch Version/s:
  6.2.x
• Backported to Branch:
  Committed

Steps to reproduce:

1. In a vanilla installation, in your localhost go to http://localhost:8080/api/jsonws/company/get-company-by-virtual-host/virtual-host/localhost?p_auth=7vGaicGJ
2. Assert that it works
3. Retry using http://localhost:8080/api/jsonws/company/get-company-by-virtual-host/virtual-host/localhost (note that the p_auth parameter has been removed)
4. Assert that it fails and a message SECURITY EXCEPTION is printed in the page:
5. Go to the browser console and check the status header.
   Current: Shows a 200 code
   Expected: An error code