throw new HttpException('Forbidden', HttpStatus.FORBIDDEN); // or throw new HttpException('Not found', HttpStatus.NOT_FOUND);