diff --git a/lib/api/builds.rb b/lib/api/builds.rb
index 33e6ed24101acf36b06abf32c26bd586769fdd47..05d1b8d92ea0b77f68a2607e1c57549ec45720ec 100644
--- a/lib/api/builds.rb
+++ b/lib/api/builds.rb
@@ -103,7 +103,7 @@ module API
         authorize_manage_builds!
 
         build = get_build(params[:build_id])
-        return not_found!(build) unless build && build.retryable?
+        return forbidden!('Build is not retryable') unless build && build.retryable?
 
         build = Ci::Build.retry(build)
 
diff --git a/spec/requests/api/builds_spec.rb b/spec/requests/api/builds_spec.rb
index b6a1154cf76683db8165484ee93ad19c483a1bfb..799558d1bdd3f1a6af05644b38f470cff4c9cd67 100644
--- a/spec/requests/api/builds_spec.rb
+++ b/spec/requests/api/builds_spec.rb
@@ -50,7 +50,7 @@ describe API::API, api: true  do
     context 'authorized user' do
       it 'should return project builds for specific commit' do
         project.ensure_ci_commit(commit.sha)
-        get api("/projects/#{project.id}/builds/commit/#{project.ci_commits.first.sha}", user)
+        get api("/projects/#{project.id}/builds/commit/#{commit.sha}", user)
 
         expect(response.status).to eq(200)
         expect(json_response).to be_an Array
@@ -60,7 +60,7 @@ describe API::API, api: true  do
     context 'unauthorized user' do
       it 'should not return project builds' do
         project.ensure_ci_commit(commit.sha)
-        get api("/projects/#{project.id}/builds/commit/#{project.ci_commits.first.sha}")
+        get api("/projects/#{project.id}/builds/commit/#{commit.sha}")
 
         expect(response.status).to eq(401)
       end
@@ -99,7 +99,7 @@ describe API::API, api: true  do
     end
   end
 
-  describe 'GET /projects/:id/builds/:build_id/cancel' do
+  describe 'POST /projects/:id/builds/:build_id/cancel' do
     context 'authorized user' do
       context 'user with :manage_builds persmission' do
         it 'should cancel running or pending build' do
@@ -128,7 +128,7 @@ describe API::API, api: true  do
     end
   end
 
-  describe 'GET /projects/:id/builds/:build_id/retry' do
+  describe 'POST /projects/:id/builds/:build_id/retry' do
     context 'authorized user' do
       context 'user with :manage_builds persmission' do
         it 'should retry non-running build' do