From 2dc600e30dec08a16fd523b8a612316d7e53f9ac Mon Sep 17 00:00:00 2001
From: Georg Lokowandt <georg.lokowandt@sap.com>
Date: Wed, 14 May 2025 11:43:32 +0200
Subject: [PATCH] clarify returned status codes

---
 src/README.md | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/README.md b/src/README.md
index 4fc04a75..df1a5b4d 100644
--- a/src/README.md
+++ b/src/README.md
@@ -46,6 +46,8 @@ permissions.
 When querying the API via gRPC, authorization for all app and component data
 is granted.
 
+Please note that in case of missing or insufficient authorization, an http status code of 404 (not found) will be returned to discourage malicious actors. Don't expect 401 or 403.
+
 ### **GET** `/api/v1/info`
 
 Retrieve JSON representation of deployed Log Cache version.