OWASP / OWASP/Nest

Unauthorized access to Projects Dashboard shows 404 instead of Access Denied

Open
#3,483 9 comments 1 reaction 0 assignees View on GitHub
bug cat-reloaded-2026 frontend good first issue
Dominant language
Python
Stars
451
Forks
702
Avg merge
22h 59m
Merged PRs (30d)
91

Description

**Describe the bug**
When an unauthorized user tries to access the Projects Dashboard, the application returns a 404 Not Found response instead of an Access Denied page

**To Reproduce**
Steps to reproduce the behavior:

1. Log in as a user without access to the Projects Dashboard.
2. Open the URL:
`http://localhost:3000/projects/dashboard`
3. The application shows a 404 Not Found page.

**Expected behavior**
The user should see an Access Denied page, just like what is currently shown on:
`http://localhost:3000/my/mentorship`

**Are you going to work on fixing this?**

- [x] Yes
- [ ] No

**Screenshots**
Image

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.