From c1bd7a116b3f0fccf3d2530c8e34b13c1d862989 Mon Sep 17 00:00:00 2001
From: timonrieger <mail@timonrieger.de>
Date: Wed, 29 Apr 2026 22:30:45 +0200
Subject: [PATCH] fix e2e tests

---
 e2e/src/specs/server/api/asset.e2e-spec.ts  | 6 +++---
 e2e/src/specs/server/api/person.e2e-spec.ts | 8 ++++----
 2 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/e2e/src/specs/server/api/asset.e2e-spec.ts b/e2e/src/specs/server/api/asset.e2e-spec.ts
index 68efb9ffe9..b85d98b913 100644
--- a/e2e/src/specs/server/api/asset.e2e-spec.ts
+++ b/e2e/src/specs/server/api/asset.e2e-spec.ts
@@ -313,7 +313,7 @@ describe('/asset', () => {
         const { status } = await request(app)
           .get(`/assets/${asset.id}`)
           .set('Authorization', `Bearer ${user2.accessToken}`);
-        expect(status).toBe(400);
+        expect(status).toBe(403);
       });
 
       it('disallows viewing trashed assets', async () => {
@@ -323,7 +323,7 @@ describe('/asset', () => {
         const { status } = await request(app)
           .get(`/assets/${asset.id}`)
           .set('Authorization', `Bearer ${user2.accessToken}`);
-        expect(status).toBe(400);
+        expect(status).toBe(403);
       });
     });
   });
@@ -657,7 +657,7 @@ describe('/asset', () => {
         const { status } = await request(app)
           .get(`/assets/${assetId}`)
           .set('Authorization', `Bearer ${admin.accessToken}`);
-        expect(status).toBe(400);
+        expect(status).toBe(403);
       }
     });
 
diff --git a/e2e/src/specs/server/api/person.e2e-spec.ts b/e2e/src/specs/server/api/person.e2e-spec.ts
index 20290cd941..66b89638bf 100644
--- a/e2e/src/specs/server/api/person.e2e-spec.ts
+++ b/e2e/src/specs/server/api/person.e2e-spec.ts
@@ -208,8 +208,8 @@ describe('/people', () => {
         .get(`/people/${uuidDto.notFound}`)
         .set('Authorization', `Bearer ${admin.accessToken}`);
 
-      expect(status).toBe(400);
-      expect(body).toEqual(errorDto.badRequest());
+      expect(status).toBe(403);
+      expect(body).toEqual(errorDto.noPermission);
     });
 
     it('should return person information', async () => {
@@ -228,8 +228,8 @@ describe('/people', () => {
         .get(`/people/${uuidDto.notFound}/statistics`)
         .set('Authorization', `Bearer ${admin.accessToken}`);
 
-      expect(status).toBe(400);
-      expect(body).toEqual(errorDto.badRequest());
+      expect(status).toBe(403);
+      expect(body).toEqual(errorDto.noPermission);
     });
 
     it('should return the correct number of assets', async () => {