Right, I understand that. What I should have said is: EntityType#safe_destroy shouldn't get called by EntityTypesController#delete. It should be called by something EntitiesController, probably. A successful DELETE should mean a followup GET returns a 404.