opened
Bottersnike
username_0
When an API request is made without a token, a 401 response is generated as expected, however when a correctly authenticated request is made but the user lacks permissions, a 401 response is still generated, rather than the semantically correct 403.
Semantically correct HTTP codes
issue