diff --git a/django/contrib/auth/decorators.py b/django/contrib/auth/decorators.py
index f3f7f53..d1d69cd 100644
--- a/django/contrib/auth/decorators.py
+++ b/django/contrib/auth/decorators.py
@@ -1,5 +1,5 @@
 from django.contrib.auth import REDIRECT_FIELD_NAME
-from django.http import HttpResponseRedirect
+from django.http import HttpResponseRedirect, HttpResponseForbidden
 from django.utils.http import urlquote
 
 def user_passes_test(test_func, login_url=None, redirect_field_name=REDIRECT_FIELD_NAME):
@@ -60,6 +60,10 @@ class _CheckLogin(object):
     def __call__(self, request, *args, **kwargs):
         if self.test_func(request.user):
             return self.view_func(request, *args, **kwargs)
-        path = urlquote(request.get_full_path())
-        tup = self.login_url, self.redirect_field_name, path
-        return HttpResponseRedirect('%s?%s=%s' % tup)
+        elif not request.user.is_authenticated():
+            path = urlquote(request.get_full_path())
+            tup = self.login_url, self.redirect_field_name, path
+            return HttpResponseRedirect('%s?%s=%s' % tup)
+        else:
+            return HttpResponseForbidden('<h1>Permission denied</h1>')
+
diff --git a/django/test/testcases.py b/django/test/testcases.py
index 1d65ee1..04246af 100644
--- a/django/test/testcases.py
+++ b/django/test/testcases.py
@@ -101,6 +101,12 @@ class TestCase(unittest.TestCase):
              " (expected %d)") %
                  (path, redirect_response.status_code, target_status_code))
 
+    def assertStatusCode(self, response, status_code):
+        """Asserts that a response had a scecific status code."""
+        self.assertEqual(response.status_code, status_code,
+            ("Wrong status code: Response code was %d"
+             " (expected %d)" % (response.status_code, status_code)))
+
     def assertContains(self, response, text, count=None, status_code=200):
         """
         Asserts that a response indicates that a page was retreived
diff --git a/tests/modeltests/test_client/models.py b/tests/modeltests/test_client/models.py
index 1a6e1bd..fb48e52 100644
--- a/tests/modeltests/test_client/models.py
+++ b/tests/modeltests/test_client/models.py
@@ -325,9 +325,9 @@ class ClientTest(TestCase):
         login = self.client.login(username='testclient', password='password')
         self.failUnless(login, 'Could not log in')
 
-        # Log in with wrong permissions. Should result in 302.
+        # Log in with wrong permissions. Should result in 403 (Forbidden).
         response = self.client.get('/test_client/permission_protected_view/')
-        self.assertRedirects(response, 'http://testserver/accounts/login/?next=/test_client/permission_protected_view/')
+        self.assertStatusCode(response, 403)
 
         # TODO: Log in with right permissions and request the page again
 
@@ -342,9 +342,9 @@ class ClientTest(TestCase):
         login = self.client.login(username='testclient', password='password')
         self.failUnless(login, 'Could not log in')
 
-        # Log in with wrong permissions. Should result in 302.
+        # Log in with wrong permissions. Should result in 403 (Forbidden).
         response = self.client.get('/test_client/permission_protected_method_view/')
-        self.assertRedirects(response, 'http://testserver/accounts/login/?next=/test_client/permission_protected_method_view/')
+        self.assertStatusCode(response, 403)
 
         # TODO: Log in with right permissions and request the page again