The payment has been submitted for cancellation, this process is asynchronous

Unauthorized response, when the user is not authenticated or the authentication token is missing in the header.

Forbidden response, when the user is authenticated but does not have the necessary permissions.

The record is in an state that cannot be edited, check the message and code for more information on why the record cannot be edited.
e.g,: When a payment has already been paid, it's value cannot be changed.