← All status codes4xx – Client Error

HTTP 403 – Forbidden

The client does not have access rights to the content, even though it may be authenticated.

Common use case

Returned when a logged-in user tries to access a resource their role or permissions don't allow, e.g. a regular user hitting an admin-only endpoint.

Example

HTTP/1.1 403 Forbidden

{"error":"You do not have permission to view this resource"}

History

Part of HTTP/1.0 (RFC 1945, 1996).

Did you know?

Unlike 401, re-authenticating won't fix a 403 - the server already knows who you are and has decided you're not allowed in.

Other 4xx codes

400Bad Request401Unauthorized402Payment Required404Not Found405Method Not Allowed406Not Acceptable407Proxy Authentication Required408Request Timeout409Conflict410Gone411Length Required412Precondition Failed413Content Too Large414URI Too Long415Unsupported Media Type416Range Not Satisfiable417Expectation Failed418I'm a teapot422Unprocessable Content425Too Early426Upgrade Required428Precondition Required429Too Many Requests430Shopify Security Rejection431Request Header Fields Too Large444No Response451Unavailable For Legal Reasons460Client Closed Connection463Malformed X-Forwarded-For Header464Incompatible Protocol Versions494Request Header Too Large495SSL Certificate Error496SSL Certificate Required497HTTP Request Sent To HTTPS Port499Client Closed Request