From 5bbd4eef2deb1dc8c22ad8264a98ca13376ab47a Mon Sep 17 00:00:00 2001
From: Dietmar Maurer <dietmar@proxmox.com>
Date: Thu, 16 Apr 2020 12:56:34 +0200
Subject: [PATCH] src/server/rest.rs: reduce delay for permission error to
 500ms

---
 src/server/rest.rs | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/src/server/rest.rs b/src/server/rest.rs
index 45067b41..64a1bf6e 100644
--- a/src/server/rest.rs
+++ b/src/server/rest.rs
@@ -521,6 +521,7 @@ pub async fn handle_request(api: Arc<ApiConfig>, req: Request<Body>) -> Result<R
     let user_info = CachedUserInfo::new()?;
 
     let delay_unauth_time = std::time::Instant::now() + std::time::Duration::from_millis(3000);
+    let access_forbidden_time = std::time::Instant::now() + std::time::Duration::from_millis(500);
 
     if comp_len >= 1 && components[0] == "api2" {
 
@@ -563,7 +564,7 @@ pub async fn handle_request(api: Arc<ApiConfig>, req: Request<Body>) -> Result<R
                     let user = rpcenv.get_user();
                     if !check_api_permission(api_method.access.permission, user.as_deref(), &uri_param, &user_info) {
                         let err = http_err!(FORBIDDEN, format!("permission check failed"));
-                        tokio::time::delay_until(Instant::from_std(delay_unauth_time)).await;
+                        tokio::time::delay_until(Instant::from_std(access_forbidden_time)).await;
                         return Ok((formatter.format_error)(err));
                     }
 
