Yep, [403 is correct](http://tools.ietf.org/html/rfc2616#section-10.4.4). Whereabouts in Post do we do this wrongly? :)