addressing @wasade comment

Author: antgonza

qiita_pet/handlers/download.py

@@ -20,7 +20,7 @@ def get(self, filepath_id):
 
         if not validate_filepath_access_by_user(self.current_user, fid):
             raise HTTPError(
-                404, "%s doesn't have access to "
+                403, "%s doesn't have access to "
                 "filepath_id: %s" % (self.current_user.email, str(fid)))
 
         relpath = filepath_id_to_rel_path(fid)

qiita_pet/test/test_download.py

@@ -42,7 +42,7 @@ def test_download(self):
 
         # failure
         response = self.get('/download/1000')
-        self.assertEqual(response.code, 404)
+        self.assertEqual(response.code, 403)
 
 
 class TestDownloadStudyBIOMSHandler(TestHandlerBase):