Skip to content
Zautha

forbidden

Returned as
The problem's code
HTTP status
403 Forbidden
type
https://zautha.com/docs/errors/forbidden

When it happens

Section titled “When it happens”
  • Frontend API: a user deletes their own account (DELETE /v1/me) while the application does not allow users to delete their accounts.
  • Dashboard: your role in the workspace does not allow the change (for example, a member changing settings that only an admin or an owner may change).
  • Your own backend: Zautha.AspNetCore answers RequireZauthaRole and RequireZauthaPermission with this code when the user’s role in the active organization does not match.

It is also the code of any 403 that has no more specific code.

What to do

Section titled “What to do”

Allow the action in the application’s settings, ask a workspace owner for a higher role, or give the user the role or permission your endpoint asks for.