add return error 404 if user do not have permission for this operation