e.g.

user is logged in but does not have permission.

an error that should not happen, is server's fault.

wraps error with current function name.

requested resources cannot be found.

validation of request fails, i.e.

auth token missing or expired.