Should probably be `/no_permissions/` to avoid an extra redirect. Also I don't think that's what "slug" usually means, I'd just call that the url.