several instances of StatusUnauthorized should really be StatusForbidden
assigned to @florent.gluck
fixed in #e15fa094
closed
