brianchandotcom/liferay-portal — pull request #13253 by samuelkong (2013-08-20 06:13:14+00:00)
Title: LPS-32651 - Instead of setting HttpResponse status SC_FORBIDDEN  directl...

...y, Use SC_NOT_FOUND status and set it with PortalUtil.sendError(..).

This way server does expose hidden DM structures.