Comment 3 for bug 1046964

Hi Dan

Sorry, my proposal was unclear.
IMO list should return 403, because if we are client developer, "200 but error" is not clean way to implement.

create -> 403
list -> 403
show -> 404
delete > 404
update > 404