Config data files in asp.net). its possibly that or simply a 404. imho, it wouldn't be proper to return 403 for something that might be accessed but you only didn't have the ideal credentials. my Alternative might be to give an accessibility denied concept having a way to change credentials. https://retirementaccountdiversif95050.izrablog.com/37042078/long-term-investment-things-to-know-before-you-buy