fixed forbidden API reference