diff --git a/taiga/projects/issues/tests/tests_api.py b/taiga/projects/issues/tests/tests_api.py
index 45c62e2d..eaf77e3b 100644
--- a/taiga/projects/issues/tests/tests_api.py
+++ b/taiga/projects/issues/tests/tests_api.py
@@ -539,7 +539,7 @@ class IssuesTestCase(test.TestCase):
             reverse("issues-detail", args=(self.issue1.id,)),
             json.dumps(data),
             content_type="application/json")
-        self.assertEqual(response.status_code, 400)
+        self.assertEqual(response.status_code, 403)
         self.assertEqual(Issue.objects.all().count(), 4)
         self.client.logout()
 
@@ -662,7 +662,7 @@ class IssuesTestCase(test.TestCase):
             reverse("issues-detail", args=(self.issue1.id,)),
             json.dumps(data),
             content_type="application/json")
-        self.assertEqual(response.status_code, 400)
+        self.assertEqual(response.status_code, 403)
         self.assertEqual(Issue.objects.all().count(), 4)
         self.client.logout()
 
@@ -781,11 +781,12 @@ class IssuesTestCase(test.TestCase):
         response = self.client.login(username=self.user3.username,
                                      password=self.user3.username)
         self.assertTrue(response)
+
         response = self.client.patch(
             reverse("issues-detail", args=(self.issue1.id,)),
             json.dumps(data),
             content_type="application/json")
-        self.assertEqual(response.status_code, 400)
+        self.assertEqual(response.status_code, 403)
         self.assertEqual(Issue.objects.all().count(), 4)
         self.client.logout()
 
diff --git a/taiga/projects/tasks/tests/tests_api.py b/taiga/projects/tasks/tests/tests_api.py
index cd7ff9ae..bb876d1d 100644
--- a/taiga/projects/tasks/tests/tests_api.py
+++ b/taiga/projects/tasks/tests/tests_api.py
@@ -436,7 +436,7 @@ class TasksTestCase(test.TestCase):
             reverse("tasks-detail", args=(self.task1.id,)),
             json.dumps(data),
             content_type="application/json")
-        self.assertEqual(response.status_code, 400)
+        self.assertEqual(response.status_code, 403)
         self.assertEqual(Task.objects.all().count(), 5)
         self.client.logout()
 
@@ -538,7 +538,7 @@ class TasksTestCase(test.TestCase):
             reverse("tasks-detail", args=(self.task1.id,)),
             json.dumps(data),
             content_type="application/json")
-        self.assertEqual(response.status_code, 400)
+        self.assertEqual(response.status_code, 403)
         self.assertEqual(Task.objects.all().count(), 5)
         self.client.logout()
 
@@ -640,7 +640,7 @@ class TasksTestCase(test.TestCase):
             reverse("tasks-detail", args=(self.task1.id,)),
             json.dumps(data),
             content_type="application/json")
-        self.assertEqual(response.status_code, 400)
+        self.assertEqual(response.status_code, 403)
         self.assertEqual(Task.objects.all().count(), 5)
         self.client.logout()
 
diff --git a/taiga/projects/userstories/tests/tests_api.py b/taiga/projects/userstories/tests/tests_api.py
index 1687214d..489c84a5 100644
--- a/taiga/projects/userstories/tests/tests_api.py
+++ b/taiga/projects/userstories/tests/tests_api.py
@@ -370,7 +370,7 @@ class UserStoriesTestCase(test.TestCase):
             reverse("userstories-detail", args=(self.userstory1.id,)),
             json.dumps(data),
             content_type="application/json")
-        self.assertEqual(response.status_code, 400)
+        self.assertEqual(response.status_code, 403)
         self.assertEqual(UserStory.objects.all().count(), 4)
         self.client.logout()
 
@@ -442,7 +442,7 @@ class UserStoriesTestCase(test.TestCase):
             reverse("userstories-detail", args=(self.userstory1.id,)),
             json.dumps(data),
             content_type="application/json")
-        self.assertEqual(response.status_code, 400)
+        self.assertEqual(response.status_code, 403)
         self.assertEqual(UserStory.objects.all().count(), 4)
         self.client.logout()
 
@@ -514,7 +514,7 @@ class UserStoriesTestCase(test.TestCase):
             reverse("userstories-detail", args=(self.userstory1.id,)),
             json.dumps(data),
             content_type="application/json")
-        self.assertEqual(response.status_code, 400)
+        self.assertEqual(response.status_code, 403)
         self.assertEqual(UserStory.objects.all().count(), 4)
         self.client.logout()