NXP-11503: Automation requests with valid credentials but that lacks some permissions on a doc should be mapped to HTTP 403 instead of 401