diff --git a/planetwars-server/src/modules/registry.rs b/planetwars-server/src/modules/registry.rs
index 8bc3a7d..c0e12d0 100644
--- a/planetwars-server/src/modules/registry.rs
+++ b/planetwars-server/src/modules/registry.rs
@@ -360,7 +360,7 @@ fn check_access(
         .expect("could not run query");
 
     match res {
-        None => Ok(()), // name has not been claimed yet (TODO: verify its validity)
+        None => Err(StatusCode::FORBIDDEN),
         Some(existing_bot) => {
             let RegistryAuth::User(user) = auth;
             if existing_bot.owner_id == Some(user.id) {