Is it suitable to use 200 http code for forbidden web page : what is the difference when we use 200 response code for a forbidden page with an error message saying 'access denied' instead of using 403 response code?

are there any security implications of this
