use requires_privilege_raise404