Return Forbidden when operation is inaccessible, to match resource endpoint status code

Return Forbidden when operation is inaccessible, to match resource endpoint status code #459