test: update TestHandleGetSandbox to expect 404 instead of 403 on namespace mismatch

Signed-off-by: Abhinav Singh <abhinavsingh717073@gmail.com>

Author: Abhinav-kodes

pkg/workloadmanager/handlers.go

@@ -332,7 +332,7 @@ func (s *Server) handleGetSandbox(c *gin.Context, kind string) {
 		_, userNamespace, _, _ := extractUserInfo(c)
 		if sandboxInfo.SandboxNamespace != userNamespace {
 			klog.Warningf("unauthorized GET attempt to session %s by user in namespace %s", sessionID, userNamespace)
-			respondError(c, http.StatusForbidden, "access denied to this session")
+			respondError(c, http.StatusNotFound, fmt.Sprintf("Session ID %s not found", sessionID))
 			return
 		}
 	}

pkg/workloadmanager/handlers_test.go

@@ -539,8 +539,8 @@ func TestHandleGetSandbox(t *testing.T) {
 				SandboxNamespace: "victim-ns",
 				Kind:             types.AgentRuntimeKind,
 			},
-			expectStatus:  http.StatusForbidden,
-			expectMessage: "access denied to this session",
+			expectStatus:  http.StatusNotFound,
+			expectMessage: "Session ID sess-auth-fail not found",
 		},
 		{
 			name:      "wrong kind",