Use 403 instead of 200 response

A forbidden should throw a 403 and this makes it easier for me to do some automated testing.

1 files changed, 3 insertions, 1 deletions

diff --git a/settings/middleware/subadminmiddleware.php b/settings/middleware/subadminmiddleware.php
index a5c005e3148..52b77cd7e4f 100644
--- a/settings/middleware/subadminmiddleware.php
+++ b/settings/middleware/subadminmiddleware.php
@@ -59,7 +59,9 @@ class SubadminMiddleware extends Middleware {
 	 * @return TemplateResponse
 	 */
 	public function afterException($controller, $methodName, \Exception $exception) {
-		return new TemplateResponse('core', '403', array(), 'guest');
+		$response = new TemplateResponse('core', '403', array(), 'guest');
+		$response->setStatus(Http::STATUS_FORBIDDEN);
+		return $response;
 	}
 
 }