Currently, a 404 page is shown if I try to access an object (differential, for example) that I do not have access to view. I feel that a 403 would be more correct and would allow me to request access from an admin if necessary.

This may have security implications.