Authorization child classes can now raise forbidden