diff --git a/pages/api/attendees/[id]/_auth-middleware.ts b/pages/api/attendees/[id]/_auth-middleware.ts
index ab27cf266e..ca01477033 100644
--- a/pages/api/attendees/[id]/_auth-middleware.ts
+++ b/pages/api/attendees/[id]/_auth-middleware.ts
@@ -14,7 +14,7 @@ async function authMiddleware(req: NextApiRequest) {
     where: { id: query.id, booking: { userId } },
   });
   // Flatten and merge all the attendees in one array
-  if (!attendee) throw new HttpError({ statusCode: 401, message: "Unauthorized" });
+  if (!attendee) throw new HttpError({ statusCode: 403, message: "Forbidden" });
 }
 
 export default authMiddleware;
diff --git a/pages/api/attendees/_post.ts b/pages/api/attendees/_post.ts
index 1e5ff8199f..106007019d 100644
--- a/pages/api/attendees/_post.ts
+++ b/pages/api/attendees/_post.ts
@@ -56,7 +56,7 @@ async function postHandler(req: NextApiRequest) {
       select: { id: true },
     });
     // Here we make sure to only return attendee's of the user's own bookings.
-    if (!userBooking) throw new HttpError({ statusCode: 401, message: "Unauthorized" });
+    if (!userBooking) throw new HttpError({ statusCode: 403, message: "Forbidden" });
   }
 
   const data = await prisma.attendee.create({
diff --git a/pages/api/availability/_get.ts b/pages/api/availability/_get.ts
index 590970fb70..7dee66c194 100644
--- a/pages/api/availability/_get.ts
+++ b/pages/api/availability/_get.ts
@@ -43,7 +43,7 @@ async function handler(req: NextApiRequest) {
     where: { id: { in: allMemberIds } },
     select: availabilityUserSelect,
   });
-  if (!isAdmin) throw new HttpError({ statusCode: 401, message: "Unauthorized" });
+  if (!isAdmin) throw new HttpError({ statusCode: 403, message: "Forbidden" });
   const availabilities = members.map(async (user) => {
     return {
       userId: user.id,
diff --git a/pages/api/booking-references/[id]/_auth-middleware.ts b/pages/api/booking-references/[id]/_auth-middleware.ts
index f8a83b3bd2..51c14abe62 100644
--- a/pages/api/booking-references/[id]/_auth-middleware.ts
+++ b/pages/api/booking-references/[id]/_auth-middleware.ts
@@ -13,7 +13,7 @@ async function authMiddleware(req: NextApiRequest) {
   const bookingReference = await prisma.bookingReference.findFirst({
     where: { id, booking: { userId } },
   });
-  if (!bookingReference) throw new HttpError({ statusCode: 401, message: "Unauthorized" });
+  if (!bookingReference) throw new HttpError({ statusCode: 403, message: "Forbidden" });
 }
 
 export default authMiddleware;
diff --git a/pages/api/custom-inputs/[id]/_auth-middleware.ts b/pages/api/custom-inputs/[id]/_auth-middleware.ts
index 1f4aff75f5..932b968f0e 100644
--- a/pages/api/custom-inputs/[id]/_auth-middleware.ts
+++ b/pages/api/custom-inputs/[id]/_auth-middleware.ts
@@ -13,7 +13,7 @@ async function authMiddleware(req: NextApiRequest) {
   const eventTypeCustomInput = await prisma.eventTypeCustomInput.findFirst({
     where: { id, eventType: { userId } },
   });
-  if (!eventTypeCustomInput) throw new HttpError({ statusCode: 401, message: "Unauthorized" });
+  if (!eventTypeCustomInput) throw new HttpError({ statusCode: 403, message: "Forbidden" });
 }
 
 export default authMiddleware;
diff --git a/pages/api/custom-inputs/_post.ts b/pages/api/custom-inputs/_post.ts
index ea9da7da4f..3e1cee11c2 100644
--- a/pages/api/custom-inputs/_post.ts
+++ b/pages/api/custom-inputs/_post.ts
@@ -32,7 +32,7 @@ async function postHandler(req: NextApiRequest) {
     const eventType = await prisma.eventType.findFirst({
       where: { id: eventTypeId, userId },
     });
-    if (!eventType) throw new HttpError({ statusCode: 401, message: "Unauthorized" });
+    if (!eventType) throw new HttpError({ statusCode: 403, message: "Forbidden" });
   }
 
   const data = await prisma.eventTypeCustomInput.create({
diff --git a/pages/api/event-types/[id]/_auth-middleware.ts b/pages/api/event-types/[id]/_auth-middleware.ts
index dd5fc90109..ba6a4da699 100644
--- a/pages/api/event-types/[id]/_auth-middleware.ts
+++ b/pages/api/event-types/[id]/_auth-middleware.ts
@@ -11,7 +11,7 @@ async function authMiddleware(req: NextApiRequest) {
   const eventType = await prisma.eventType.findFirst({
     where: { id, users: { some: { id: userId } } },
   });
-  if (!eventType) throw new HttpError({ statusCode: 401, message: "Unauthorized" });
+  if (!eventType) throw new HttpError({ statusCode: 403, message: "Forbidden" });
 }
 
 export default authMiddleware;
diff --git a/pages/api/event-types/[id]/_delete.ts b/pages/api/event-types/[id]/_delete.ts
index a4fbec2e2b..54b776d801 100644
--- a/pages/api/event-types/[id]/_delete.ts
+++ b/pages/api/event-types/[id]/_delete.ts
@@ -46,7 +46,7 @@ async function checkPermissions(req: NextApiRequest) {
   if (isAdmin) return;
   /** Only event type owners can delete it */
   const eventType = await prisma.eventType.findFirst({ where: { id, userId } });
-  if (!eventType) throw new HttpError({ statusCode: 401, message: "Unauthorized" });
+  if (!eventType) throw new HttpError({ statusCode: 403, message: "Forbidden" });
 }
 
 export default defaultResponder(deleteHandler);
diff --git a/pages/api/event-types/[id]/_patch.ts b/pages/api/event-types/[id]/_patch.ts
index 28956e15df..fc0ba28baa 100644
--- a/pages/api/event-types/[id]/_patch.ts
+++ b/pages/api/event-types/[id]/_patch.ts
@@ -48,7 +48,7 @@ async function checkPermissions(req: NextApiRequest) {
   if (isAdmin) return;
   /** Only event type owners can modify it */
   const eventType = await prisma.eventType.findFirst({ where: { id, userId } });
-  if (!eventType) throw new HttpError({ statusCode: 401, message: "Unauthorized" });
+  if (!eventType) throw new HttpError({ statusCode: 403, message: "Forbidden" });
 }
 
 export default defaultResponder(patchHandler);
diff --git a/pages/api/schedules/[id]/_auth-middleware.ts b/pages/api/schedules/[id]/_auth-middleware.ts
index 18139171bf..ad884d5c5d 100644
--- a/pages/api/schedules/[id]/_auth-middleware.ts
+++ b/pages/api/schedules/[id]/_auth-middleware.ts
@@ -13,7 +13,7 @@ async function authMiddleware(req: NextApiRequest) {
   const schedule = await prisma.schedule.findFirst({
     where: { id, userId },
   });
-  if (!schedule) throw new HttpError({ statusCode: 401, message: "Unauthorized" });
+  if (!schedule) throw new HttpError({ statusCode: 403, message: "Forbidden" });
 }
 
 export default authMiddleware;
diff --git a/pages/api/users/[userId]/_delete.ts b/pages/api/users/[userId]/_delete.ts
index 391e341244..9d512985eb 100644
--- a/pages/api/users/[userId]/_delete.ts
+++ b/pages/api/users/[userId]/_delete.ts
@@ -34,7 +34,7 @@ export async function deleteHandler(req: NextApiRequest) {
   const query = schemaQueryUserId.parse(req.query);
   // Here we only check for ownership of the user if the user is not admin, otherwise we let ADMIN's edit any user
   if (!isAdmin && query.userId !== req.userId)
-    throw new HttpError({ statusCode: 401, message: "Unauthorized" });
+    throw new HttpError({ statusCode: 403, message: "Forbidden" });
 
   const user = await prisma.user.findUnique({ where: { id: query.userId } });
   if (!user) throw new HttpError({ statusCode: 404, message: "User not found" });
diff --git a/pages/api/users/[userId]/_get.ts b/pages/api/users/[userId]/_get.ts
index e379c5fbf1..ba9c8f61b5 100644
--- a/pages/api/users/[userId]/_get.ts
+++ b/pages/api/users/[userId]/_get.ts
@@ -36,7 +36,7 @@ export async function getHandler(req: NextApiRequest) {
   const query = schemaQueryUserId.parse(req.query);
   // Here we only check for ownership of the user if the user is not admin, otherwise we let ADMIN's edit any user
   if (!isAdmin && query.userId !== req.userId)
-    throw new HttpError({ statusCode: 401, message: "Unauthorized" });
+    throw new HttpError({ statusCode: 403, message: "Forbidden" });
   const data = await prisma.user.findUnique({ where: { id: query.userId } });
   const user = schemaUserReadPublic.parse(data);
   return { user };
diff --git a/pages/api/users/[userId]/_patch.ts b/pages/api/users/[userId]/_patch.ts
index 9e6fee7f91..aca10a89bb 100644
--- a/pages/api/users/[userId]/_patch.ts
+++ b/pages/api/users/[userId]/_patch.ts
@@ -56,7 +56,7 @@ export async function patchHandler(req: NextApiRequest) {
   const query = schemaQueryUserId.parse(req.query);
   // Here we only check for ownership of the user if the user is not admin, otherwise we let ADMIN's edit any user
   if (!isAdmin && query.userId !== req.userId)
-    throw new HttpError({ statusCode: 401, message: "Unauthorized" });
+    throw new HttpError({ statusCode: 403, message: "Forbidden" });
 
   const body = schemaUserEditBodyParams.parse(req.body);
   const userSchedules = await prisma.schedule.findMany({