--- a/web/views/staticcontrollers.py	Thu Sep 19 18:03:09 2013 +0200
+++ b/web/views/staticcontrollers.py	Thu Sep 19 18:11:12 2013 +0200
@@ -31,7 +31,7 @@
 from datetime import datetime, timedelta
 from logging import getLogger
 
-from cubicweb import Unauthorized
+from cubicweb import Forbidden
 from cubicweb.web import NotFound
 from cubicweb.web.http_headers import generateDateTime
 from cubicweb.web.controller import Controller
@@ -59,7 +59,7 @@
         if osp.isdir(path):
             if self.directory_listing_allowed:
                 return u''
-            raise Unauthorized(path)
+            raise Forbidden(path)
         if not osp.isfile(path):
             raise NotFound()
         if not debugmode: