Comment 2 for bug 1413610

Currently 403 doesn't seem to be an expected code?

    @wsgi.response(202)
    @extensions.expected_errors((400, 404, 409))
    @validation.schema(volumes_schema.update_volume_attachment)
    def update(self, req, server_id, id, body):