It demonstrates real usage pattern. May be instead of Http404 we should use PermissionDenied.