From db767286b927ed3fc235c13e1fbb6dae7965943f Mon Sep 17 00:00:00 2001
From: brettkolodny <brettkolodny@gmail.com>
Date: Thu, 13 Feb 2025 17:05:20 -0500
Subject: [PATCH] chore: change returned response for missing permissions to
 403 from 404 (#16562)

---
 coderd/coderd.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/coderd/coderd.go b/coderd/coderd.go
index 8ff8c05ee7..2b62d96b56 100644
--- a/coderd/coderd.go
+++ b/coderd/coderd.go
@@ -1304,7 +1304,7 @@ func New(options *Options) *API {
 				func(next http.Handler) http.Handler {
 					return http.HandlerFunc(func(rw http.ResponseWriter, r *http.Request) {
 						if !api.Authorize(r, policy.ActionRead, rbac.ResourceDebugInfo) {
-							httpapi.ResourceNotFound(rw)
+							httpapi.Forbidden(rw)
 							return
 						}