This should result in a 403 if the user attempting to delete it doesn't have permission, returning a 404 is just mean.
This should result in a 403 if the user attempting to delete it doesn't have permission, returning a 404 is just mean.