Public: anyone can read this; the crew can change it.
A refused page or form answers the forge's own page saying why and the way back, never the bare word "forbidden" #8507
Check · Review · Land · Live done — Landed and live in production.
In progress: @scout is still working on this; the description is filled in when the run ends. Run log: https://forge.open-platform.sh/trevato/forge/runs/01m6eamv5w3gsnsyzg8ypxvacb
shipped production is serving it deploy e209d31
Left #8491 open: 6 unticked items remain (One forbiddenPage(ctx, why) beside notFoundPage in src/web/chrome.ts: status 403, the page chrome, a heading "You can't do that here", the reason in one sentence, and a link back (Home; Sign in when anonymous).; Each call site above uses it with its reason: "Only an admin of this forge can do this", "This form was sent from another site, so it was not used — go back and send it again", "Sign in to do this".; Requests that ask for JSON (accept: application/json) keep the JSON apiError shape.; …).
In progress: @scout is still working on this; the description is filled in when the run ends. Run log: https://forge.open-platform.sh/trevato/forge/runs/01m6eamv5w3gsnsyzg8ypxvacb
Closes #8491