diff --git a/scm-webapp/src/main/java/sonia/scm/filter/SecurityFilter.java b/scm-webapp/src/main/java/sonia/scm/filter/SecurityFilter.java
index b5d79a4d40..a276e5920e 100644
--- a/scm-webapp/src/main/java/sonia/scm/filter/SecurityFilter.java
+++ b/scm-webapp/src/main/java/sonia/scm/filter/SecurityFilter.java
@@ -111,11 +111,11 @@ public class SecurityFilter extends HttpFilter
         }
         else if (securityContext.isAuthenticated())
         {
-          response.sendError(HttpServletResponse.SC_UNAUTHORIZED);
+          response.sendError(HttpServletResponse.SC_FORBIDDEN);
         }
         else
         {
-          response.sendError(HttpServletResponse.SC_FORBIDDEN);
+          response.sendError(HttpServletResponse.SC_UNAUTHORIZED);
         }
       }
       else