Fixed permission names, permission validations and some type errors in other
views
Replaced HttpResponseForbidden reponses by PermissionDenied exceptions.
Removed PEP8 checks for E125 rule for the sake of code visibility. Added the
403.html template with a copy of the note_allowed template.