[web] add a Forbidden exception This is similar to the Unauthorized exception, but generates a 403 error instead of a 401 (Unauthorized)

# migrate default format for TriInfo `comment_format` attribute
sync_schema_props_perms('TrInfo')

commit()