what is Correct Exception to raise in a rest API in response to request to delete a resource without enough permission?

Question

I'm creating a rest API, using ASP.net Core and bit-framework
We want to allow the clients to be able to delete just the resources that they have created themselves

Questions:

In case a client asks to delete a resource which is created by another client,

1. what is the best exception to raise in the API?

2. What is the most correct HTTP status code to return?

3. All the exception implemented in Bit.Owin.Exceptions namespace are:\

   1. BadRequestException
   2. ResourceNotFoundException
   3. AppException
   4. DomainLogicException

   should I stick to this list of exceptions in my API? Is this list of exceptions going to be including more exceptions to cover more scenarios?

4. I think one of these status codes must be returned, but which one suites better our condition?:

   • 403 Forbidden
   • 405 Not Allowed
   • 409 Resource Conflict

Answer 1

Based on @cassiomolin's answer, you can create your own exception type based on following docs:

https://docs.bit-framework.com/introduction/web-api#exception-handling

add exception type to bit framework known exceptions

public class CanNotDeleteOtherClientResourceException : Exception, IKnownException, IHttpStatusCodeAwareException
{
    public CanNotDeleteOtherClientResourceException(string message)
        : base(message)
    {
    }

    public HttpStatusCode StatusCode { get; set; } = HttpStatusCode.Forbidden;
}