Forbidden.yaml

description: |
  Where status code 403 (Forbidden) is returned then an [NHSDigital-OperationOutcome](https://fhir.nhs.uk/StructureDefinition/NHSDigital-OperationOutcome) will be included in the body, as detailed below.
  Check diagnostics property for specific information regarding the error.
  
  | issue.details.coding.code | issue.code | Coding System                                                      | Description                                                                        |
  | ------------------------- | ---------- | ------------------------------------------------------------------ | ---------------------------------------------------------------------------------- |
  | REC_FORBIDDEN             | forbidden  | [BaRS Error Code](https://fhir.nhs.uk/CodeSystem/http-error-codes) | A call attempts to access or operate upon a resource without proper authorisation. |
  | ACCESS_DENIED             | forbidden  | [APIM Error Code](https://fhir.nhs.uk/CodeSystem/NHSD-API-ErrorOrWarningCode) | The request could not be authenticated due to insufficient credentials being provided. |

headers:
  X-Correlation-ID:
    $ref: '../headers/response/CorrelationID.yaml'
  X-Request-ID:
    $ref: '../headers/response/RequestID.yaml'
  Content-Type:
    $ref: '../headers/response/ContentTypeFhirJson.yaml'
content:
  application/fhir+json:
    schema:
      $ref: '../NHSDigital-OperationOutcome.yaml'
    example:
      $ref: '../../examples/NHSDigital-OperationOutcome-403.json'