Should not there be an ```ForbiddenException``` thrown in an ```else``` of this method?