How to distinguish between bad file path vs no access

How-to
#1

Hi,

I was using the ArvadosR SDK to get data from Arvados, and for some files that I don’t have access, I got 404 File not found error message. I’m thinking should 403 Forbidden message more clear? Does anyone have experiencing dealing with the difference between wrong file path vs no access to correct file path?

#2

Hi there @yli110-stat697,

Arvados always returns 404 for collections you do not have permission to access, this is an information security design decision to avoid disclosing information (knowledge that a file exists on the system by returning 403 instead of 404).

Thanks,
Peter