throw status code 403 for not permitted queries