Re: Users with different access rights in HTTP Authentication

Mark Nottingham wrote:
> Is this just a matter of s/allowed/supported/ in the definition of 405?

Yes.

That would make the definition of 405 consistent with the definition of 
the Allow header, which currently says:

"The response-header field "Allow" lists the set of methods advertised 
as supported by the resource identified by the request-target. The 
purpose of this field is strictly to inform the recipient of valid 
methods associated with the resource. An Allow header field MUST be 
present in a 405 (Method Not Allowed) response." -- 
<http://greenbytes.de/tech/webdav/draft-ietf-httpbis-p2-semantics-06.html#rfc.section.9.1>

That would still leave the reason phrase and the *name* of the "Allow" 
header confusing, but we'll probably have to live with that.

BR, Julian