diff --git a/Govor.API.Tests/IntegrationTests/Controllers/MediaControllerTests.cs b/Govor.API.Tests/IntegrationTests/Controllers/MediaControllerTests.cs
index ad5b5dc..0cf8f7e 100644
--- a/Govor.API.Tests/IntegrationTests/Controllers/MediaControllerTests.cs
+++ b/Govor.API.Tests/IntegrationTests/Controllers/MediaControllerTests.cs
@@ -218,9 +218,9 @@ public class MediaControllerTests
         var result = await _controller.Upload(uploadRequest);
 
         // Assert
-        Assert.That(result, Is.InstanceOf<UnauthorizedObjectResult>());
-        var unauthorizedResult = result as UnauthorizedObjectResult;
-        Assert.That(unauthorizedResult?.Value, Is.EqualTo("Access denied"));
+        Assert.That(result, Is.InstanceOf<ForbidResult>());
+        var forbidResult = result as ForbidResult;
+        Assert.That(forbidResult.AuthenticationSchemes.First(), Is.EqualTo("Access denied"));
     }
 
     [Test]
diff --git a/Govor.API/Controllers/OnlinePingingController.cs b/Govor.API/Controllers/OnlinePingingController.cs
index 9d54551..871e960 100644
--- a/Govor.API/Controllers/OnlinePingingController.cs
+++ b/Govor.API/Controllers/OnlinePingingController.cs
@@ -43,6 +43,11 @@ public class OnlinePingingController : Controller
             _logger.LogError(e, e.Message);
             return BadRequest("User can't be found in our database.");
         }
+        catch (UnauthorizedAccessException e)
+        {
+            _logger.LogError(e, e.Message);
+            return Forbid(e.Message);
+        }
         catch (Exception e)
         {
             _logger.LogError(e, e.Message);