Index: dav/dav/src/java/org/sakaiproject/dav/DavServlet.java =================================================================== --- dav/dav/src/java/org/sakaiproject/dav/DavServlet.java (revision 440) +++ dav/dav/src/java/org/sakaiproject/dav/DavServlet.java (revision 441) @@ -1667,10 +1667,13 @@ * The http servlet response object. * @return any error message, or null if all went well. */ - private String doContent(String id, HttpServletRequest req, HttpServletResponse res) + private String doContent(String id, HttpServletRequest req, HttpServletResponse res) throws IOException { if (prohibited(id)) - return "You do not have permission to view this resource"; + { + res.sendError(HttpServletResponse.SC_FORBIDDEN); + return "You do not have permission to view this resource"; + } // resource or collection? check the properties (also finds bad id and checks permissions) boolean isCollection = false; @@ -1681,21 +1684,25 @@ } catch (PermissionException e) { + res.sendError(HttpServletResponse.SC_FORBIDDEN); return "You do not have permission to view this resource"; } catch (IdUnusedException e) { + res.sendError(HttpServletResponse.SC_NOT_FOUND, id); return "This resource does not exist"; } catch (EntityPropertyNotDefinedException e) { + res.sendError(HttpServletResponse.SC_NOT_FOUND, id); return "This resource does not exist"; } catch (EntityPropertyTypeException e) { + res.sendError(HttpServletResponse.SC_NOT_FOUND, id); return "This resource does not exist"; } - + // for resources if (!isCollection) {