#666 When user has no access to download file, returning 403 instead of 404