Ticket #42828: 42828.patch

src/wp-includes/rest-api/class-wp-rest-server.php

@@ -915 +915 @@
                                                 if ( is_wp_error( $permission ) ) {
                                                         $response = $permission;
                                                 } elseif ( false === $permission || null === $permission ) {
-                                                        $response = new WP_Error( 'rest_forbidden', __( 'Sorry, you are not allowed to do that.' ), array( 'status' => 403 ) );
+                                                        $response = new WP_Error( 'rest_forbidden', __( 'Sorry, you are not allowed to do that.' ), array( 'status' => rest_authorization_required_code() ) );
                                                 }
                                         }
                                 }