Incorrect API error response when forbidden

[qqmyers]

What steps does it take to reproduce the issue? Discovered in code review of #10299:
https://github.com/IQSS/dataverse/blob/develop/src/main/java/edu/harvard/iq/dataverse/api/AbstractApiBean.java#L604 and probably

dataverse/src/main/java/edu/harvard/iq/dataverse/api/AbstractApiBean.java

Line 797 in 82585f9

protected Response permissionError( String message ) {

result in 401/Unauthorized error codes rather than (the correct) 403/Forbidden.

• When does this issue occur?
  ~Any API call resulting in a PermissionException in the underlying command when the user does not have sufficient permission.

Which version of Dataverse are you using?
v6.1