403 vs 404 in Revo

I’ve created a few different user groups and resource groups and I’ve started to get permissions enforced. However, I’ve noticed that if I try to navigate to a resource that requires authentication, e.g. http://mysite.com/secret , I’m getting the 404 page, not the 403 page. I checked my system settings. Did I set up something incorrectly with my permissions to get behavior like this, or is this a bug in the error handling?

Thanks!

Yep, you need to give anonymous users "load" permission, but not "view" in order to render 401 Unauthorized, which is what I think you meant to say instead of 403.

Snap, I thought I knew my HTTP access codes.

The anonymous user group already has a "Load Only" access policy to the web context, so I’m not sure what I’d need to change here. Can you clarify?

There’s a section on that here (near the bottom): http://bobsguides.com/revolution-permissions.html

I understand the difference here from a technical standpoint, but this is hard to explain this when the expected behavior is so different from the actual. Thanks for the guide, Bob... makes for some light reading as I attempt to pacify a client.