Add Forbidden exception handling and update documentation for access checks

Author: Jens Kürten

csfunctions/service/base.py

@@ -9,6 +9,10 @@ class Unauthorized(Exception):
     pass
 
 
+class Forbidden(Exception):
+    pass
+
+
 class Conflict(Exception):
     pass
 
@@ -52,6 +56,8 @@ def request(
 
         if response.status_code == 401:
             raise Unauthorized
+        if response.status_code == 403:
+            raise Forbidden
         elif response.status_code == 409:
             raise Conflict
         elif response.status_code == 404:

csfunctions/service/file_upload.py

@@ -143,7 +143,8 @@ def upload_file_content(
             delete_derived_files: Whether to delete derived files after upload.
 
         Raises:
-            csfunctions.service.Unauthorized: If access check fails.
+            csfunctions.service.Forbidden: If access check fails.
+            csfunctions.service.Unauthorized: If the service token is invalid.
             csfunctions.service.Conflict: If the file is already locked.
             csfunctions.service.NotFound: If the file object does not exist.
             csfunctions.service.RateLimitExceeded: If the services rate limit is exceeded.
@@ -205,7 +206,8 @@ def upload_new_file(
             The ID of the newly created file object.
 
         Raises:
-            csfunctions.service.Unauthorized: If access check fails.
+            csfunctions.service.Forbidden: If access check fails.
+            csfunctions.service.Unauthorized: If the service token is invalid.
             csfunctions.service.NotFound: If the parent object does not exist.
             csfunctions.service.RateLimitExceeded: If the services rate limit is exceeded.
         """

docs/reference/service.md

@@ -73,7 +73,8 @@ Creates a new file attached to the parent object and uploads content from the pr
 
 **Exceptions:**
 
-- `csfunctions.service.Unauthorized`: If access check fails.
+- `csfunctions.service.Unauthorized`: If th service token is invalid.
+- `csfunctions.service.Forbidden`: If access check fails.
 - `csfunctions.service.NotFound`: If the parent object does not exist.
 
 
@@ -119,7 +120,8 @@ Uploads new content to an existing file object, overwriting its previous content
 
 **Exceptions:**
 
-- `csfunctions.service.Unauthorized`: If access check fails.
+- `csfunctions.service.Unauthorized`: If th service token is invalid.
+- `csfunctions.service.Forbidden`: If access check fails.
 - `csfunctions.service.Conflict`: If the file is already locked.
 - `csfunctions.service.NotFound`: If the file object does not exist.
 - `csfunctions.service.RateLimitExceeded`: If the services rate limit is exceeded.