PUT responses should have a 403 forbidden HTTP status code, communicating that consumers are not allowed to access
OpenAPI Response Put 403 Status Code Info
Message: PUT Responses Has 403 Status Codes
Policies
Response 4xx
Client error responses are where developer experience lives or dies. Consistent 400, 401, 403, 404, and 429 responses with shared schema references make error handling predictable.