{"action":"created","issue":{"url":"https://api.github.com/repos/piwik/piwik/issues/7293","labels_url":"https://api.github.com/repos/piwik/piwik/issues/7293/labels{/name}","comments_url":"https://api.github.com/repos/piwik/piwik/issues/7293/comments","events_url":"https://api.github.com/repos/piwik/piwik/issues/7293/events","html_url":"https://github.com/piwik/piwik/issues/7293","id":58801087,"number":7293,"title":"Return http status code 403 when access denied.","user":{"login":"sirtet","id":3509308,"avatar_url":"https://avatars.githubusercontent.com/u/3509308?v=3","gravatar_id":"","url":"https://api.github.com/users/sirtet","html_url":"https://github.com/sirtet","followers_url":"https://api.github.com/users/sirtet/followers","following_url":"https://api.github.com/users/sirtet/following{/other_user}","gists_url":"https://api.github.com/users/sirtet/gists{/gist_id}","starred_url":"https://api.github.com/users/sirtet/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sirtet/subscriptions","organizations_url":"https://api.github.com/users/sirtet/orgs","repos_url":"https://api.github.com/users/sirtet/repos","events_url":"https://api.github.com/users/sirtet/events{/privacy}","received_events_url":"https://api.github.com/users/sirtet/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-02-24T20:45:10Z","updated_at":"2015-02-24T21:55:05Z","closed_at":null,"body":"When trying a piwik page without logging in, the response is the login form, delivered with status code 200 OK. I think that should be delivered with a 403."},"comment":{"url":"https://api.github.com/repos/piwik/piwik/issues/comments/75854952","html_url":"https://github.com/piwik/piwik/issues/7293#issuecomment-75854952","issue_url":"https://api.github.com/repos/piwik/piwik/issues/7293","id":75854952,"user":{"login":"mnapoli","id":720328,"avatar_url":"https://avatars.githubusercontent.com/u/720328?v=3","gravatar_id":"","url":"https://api.github.com/users/mnapoli","html_url":"https://github.com/mnapoli","followers_url":"https://api.github.com/users/mnapoli/followers","following_url":"https://api.github.com/users/mnapoli/following{/other_user}","gists_url":"https://api.github.com/users/mnapoli/gists{/gist_id}","starred_url":"https://api.github.com/users/mnapoli/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mnapoli/subscriptions","organizations_url":"https://api.github.com/users/mnapoli/orgs","repos_url":"https://api.github.com/users/mnapoli/repos","events_url":"https://api.github.com/users/mnapoli/events{/privacy}","received_events_url":"https://api.github.com/users/mnapoli/received_events","type":"User","site_admin":false},"created_at":"2015-02-24T21:55:05Z","updated_at":"2015-02-24T21:55:05Z","body":":+1: but I think [401 is better](http://en.wikipedia.org/wiki/List_of_HTTP_status_codes#4xx_Client_Error)\r\n\r\n> **401 Unauthorized**\r\n>\r\n> Similar to 403 Forbidden, but specifically for use when authentication is required and has failed or has not yet been provided."}}