auth.forbidden
The credential does not permit this
| Type | https://mthds.ai/errors/auth.forbidden |
| Family | auth: Credentials and permissions. |
| Domain | account: the account's owner acts |
| Retry | no: repeating the operation fails the same way |
| HTTP status | 403 |
| Raised as | a problem document, sent as the body of an HTTP response or kept in a run's record |
What it means
The request is authenticated, but its identity lacks the role, the flag or the session the operation needs.
What to do
Have the account's owner grant what params.requirement names, or send the request with an identity that holds it.
Next steps
A problem carries the step aimed at whoever reads it: the first when its reader is the domain's actor, the account's owner, and the second for any other reader.
| Reader | Kind | Detail |
|---|---|---|
| The domain's actor | request_access |
Ask for '{requirement}' on this account, then send the request again. |
| Any other reader | contact_owner |
Ask the account's owner to grant '{requirement}'. |
Detail
The problem's detail is written from this template, filled with the occurrence's parameters:
The request's identity lacks '
{requirement}', which this operation needs.
Parameters
Every parameter is present on every occurrence of the code.
| Name | Type | Description |
|---|---|---|
requirement |
identifier |
The role, flag or session the operation needs. |
See also
- Error Registry, which describes the members of this page
- Error Codes, every code of the core registry