Changed default permission denied http code to 404
Ensure valid selection when posting (existing selected=...)
Reusable way to apply selection
Throw -> Delete