Sometimes, this error is used as an “OK” response for other types of conditions, such as when the user has been successfully authenticated but doesn't have permission to access the requested resource. In this case, it's usual to provide an alternative representation of the resource, or return 404 Not Found if no such representation is available.