set response code to 403 on forbidden access
return empty array when no worker data found