403 for a message that isn't yours.

darcs-hash:20080923050637-5ed1f-c568033b5c00ac32d9ad63b5a4d18a81c09ad525.gz

diff --git a/actions/showmessage.php b/actions/showmessage.php
index da6546ebc315db22e398a86da719ab8447d06803..08c71b5a999001bfc4e964277d54cdcae482cf94 100644 (file)
--- a/actions/showmessage.php
+++ b/actions/showmessage.php
@@ -42,7 +42,7 @@ class ShowmessageAction extends MailboxAction {
                        $cur->id != $message->from_profile &&
                        $cur->id != $message->to_profile) 
                {
-                       $this->client_error(_('Only the sender and recipient may read this message.'), 404);
+                       $this->client_error(_('Only the sender and recipient may read this message.'), 403);
                        return;
                }