HTTP statuscode while MOVE between cross-spaces with Viewer role

[saw-jan]

Q: What should be the status code while moving between cross-spaces with Viewer role?

Currently, most cases return 403 which seems reasonable (because viewer role is not permitted to do so).
But MOVE to/from shares space returns 502 regardless of the role.

Should they return 502 as mentioned in #8063 (comment) or 403 is the correct one for Viewer role.

Here are test cases:

1. ❗ Using path

from	to	result
project (manager/editor)	project (viewer)	403 ❓
project (viewer)	project (manager/editor/viewer)	403 ❓
project (viewer)	personal	403 ❓
personal	project (viewer)	403 ❓

2. ❗ Using file-id

from	to	result
project (manager/editor)	project (viewer)	403 ❓
project (viewer)	project (manager/editor/viewer)	403 ❓
project (viewer)	personal	403 ❓
personal	project (viewer)	403 ❓
shares (read)	personal	403 ❓
shares (read)	project (manager/editor/viewer)	403 ❓
shares (editor/uploader)	project (viewer)	403 ❓

✔️ Working as expected

from	to	result
project (viewer)	shares (all/change/read)	502 👍
personal	shares (read)	502 👍
shares (read)	personal	502 👍
shares (read)	project (manager/editor/viewer)	502 👍
shares (read)	shares (all/change/read)	502 👍

[saw-jan]

CC @ScharfViktor @micbar

[ScharfViktor]

CC @ScharfViktor @micbar

403 is fine IMHO. if it isn't important for client I'd leave it as it is

[saw-jan]

403 seems correct for viewer role but MOVE from/to Shares space returns 502 so that's confusing.
If 502 is expected for shares space then we can close this one

[saw-jan]

@micbar I would like to close this issue if 403 is the expected code for the above cases.

[micbar]

That is ok.